Endpoint Protection

 View Only
  • 1.  Endpoint Protection on a Mac keeps checking for updates

    Posted Dec 04, 2010 09:57 PM

    I just installed Symantec Endpoint Proection on three different Macs and set it up to update once a month but on each machine it seems to be checking everything two or three times a day and it runs automatically any time I reboot. It's product version 11.0.6100 (0179) and Virus Definition file 12/3/2010.

    After it checks it says everything is up to date but the Macs slow down while it's doing the check. Is this normal behavor for this program. Assuming it's not normal, how do I get it to only update when it is scheduled to check?

     

    Thanks,

     

    Steve



  • 2.  RE: Endpoint Protection on a Mac keeps checking for updates

    Broadcom Employee
    Posted Dec 05, 2010 08:04 AM

    Please try this KB:

    http://www.symantec.com/business/support/index?page=content&id=TECH144410&actp=search&viewlocale=en_US&searchid=1291554097807



  • 3.  RE: Endpoint Protection on a Mac keeps checking for updates

    Posted Dec 06, 2010 05:51 AM

    Hi Steve,

    I agree with yang_zhang: this is a good article:  Unexpected, frequent LiveUpdate sessions launch on SEP for Macintosh client (http://www.symantec.com/docs/TECH144410)

    If the issue is occuring on a managed SEP fro Mac client, please check the policy being pushed down from its SEPM!

    Two general notes: once a month is not often enough for AV definition updates.  There are new AV defs for Mac released every day: keeping up-to-date is crucial fro keeping those computers free from infection.

    Second: I recommend upgrading to the new SEP 11 RU6 MP2 clients for Mac.  The new release includes several important enhancements and improvements.

    Please do let the forum community know if this solves your issue!

    Thanks and best regards,

    Mick



  • 4.  RE: Endpoint Protection on a Mac keeps checking for updates

    Posted Dec 06, 2010 11:35 AM

    I whipped that article into shape, so I'm glad it's helpful already. =)

    I wanted to add that if you meant for these to be managed, that would eliminate the 'hidden' (root user crontab) daily scheduled job.  Packages that are exported as managed do allow for installation as unmanaged.

    How to convert an unmanaged SEP for Macintosh client to managed
    http://www.symantec.com/docs/TECH131585

    I also second the recommendation that once a month is not frequent enough.  The definitions also detect Windows threats, so it keeps Macs from being 'carriers'. 

    For what it's worth, I don't notice any change in my machine when it's checking for updates. Also, if LiveUpdate is scheduled to run when no one is logged in, it will not be able to launch until that user is logged in (for user-specific schedules).

    sandra