Endpoint Protection

Hi

My main problem is that I have a huge number of .m25 files building up, dating back to Dec 08, approx 30gb's worth. Other than this the Server is functioning fine. I ran the symantec support tool, which gave me the error message below, and  a link to a symantec kb:

Issue Is Microsoft IIS correctly configured for Symantec Endpoint Protection Manager? Product Symantec Endpoint Protection Category Console Subcategory Configuration Symantec KBs
kb = Unable to communicate with the reporting component after logging to the Symantec Endpoint Protection Manager

So following the kb through I get to Testing the ODBC connection before I encounter my first problem, everything is setup as indicated, but the connection fails with "Connection failed unable to start database server".

Both odbcad32 and dbsrv9 are running, dbsrv9 is listening on the correct port.

The system was a straight forward single server with built in database.

My main objective is/was to get rid of these .m25 files, the number of revisions to keep is set to 10, yet I have hundreds of them. I am not sure if the error the support tool has highlighted is relevant to this problem, as, as I have said the server is working fine other than this.

Any help you can give will be much appreciated. 

what's the version of SEPM you have installed?
most of the issues with sizing were solved in MR3.

I am running MR4, which was upgraded from MR2

I think that's a leftover from MR2, do you still have MR2 machines on your network? mdef builder was used before for definitions updates but it was changed to Xdelta in next release. If you still have some MR2 machines on the network then mdefbuilder will still run and the files will build up.

I found a rogue MR2 client and have updated it to MR4. So will monitor whether the .m25 files keep increasing.

Is it safe to delete/move these files, either a) if the quantity of them is still increasing or b) if they are no longer being generated.

Thanks for the above advise hope that fixes it.

you should be safe to delete those files. if they are needed mdefbuilder will build new update files from current definition set.
just stop SEPM service before deleting them and then start it again.

Thanks pbogu

Hi again,

The .m25 files are still being added, I have checked, and there are now no MR2 machines left, all are on mr4 now, is there any way to force stop mdefbuilder from running?

Contact Technical Support. It should stop using mdef builder if there are no pre-mr3 machines.