Endpoint Protection

Please reference previous thread with same title, sans 2.

In July 2015, we had a set of laptops that we due a scheduled update with the latest Nav Def file. The laptops are in a controlled environment, no internet access. The had Windows XP and SEP 11.0.6000.550 . After the update was executed, the pop-up window read "Intelligent Updater session complete.  All updates failed to install on the machine.  For more details about the processing, please check the log file "Log.IntelligentUpdater.txt" created in the user's temporary directory.” Going to the SEP GUI, it was determined that the status was green, and all was good despite the pop-up window error message.

This caused a lot of panic about our systems being protected. We know about the EOSL for SEP and the risks of Windows XP, but that is just what we have to live with. In discussions on this website, it was said that the computers are still protected even though the pop up box says the update failed. Since then, we have made updates in October, 2015, Dec 2015, and several times in 2016, with no mention of the pop-up error message again. Is there any explanation for this? We have also updated to Windows 7 in December 2015.

You're still running 11.x, correct? 11.x may still get updated if connected to a 12.1 SEPM but those updates are untested and may or may not work. It's a roll of the dice by running 11.x.

Symantec Endpoint Protection 11.0.x End of Support Life

https://support.symantec.com/en_US/article.TECH226804.html

Upgrade!

I know, I know, I know. My hands are tied. All I'm asking for is an explanation for why the errors no longer appear. My sentiments are the same as yours, and when I had the pop up window error, it was easy to say to management that we had to upgrade, but now we do not get the error. So.....can you tell me why?

Hard to say without jumping on a machine and looking.

Are these clients connected to a 12.1 SEPM? It could've been that they got updated that way. I doubt Intelligent Updater will still work on 11.x clients.

If the client shows the content is up to date, you should be ok for now.

No the computers are not linked to 12.1 SEPM. There was a period of time, best I can determine, around June - July 2015, that we got these error messages. We assumed that we would get these error until we upgraded. But then the errors went away. Do you know if there is a date in the future when Symantec updates will not work for 11.0? I know about the limited protection now, but if the status is green and looks like we're good.

Per Symantec on January 5th, 2015:

• Endpoint Protection 11.0.x clients will no longer be able to download updates from Symantec LiveUpdate or an internal LiveUpdate Administrator.
  • Endpoint Protection 11.0.x clients can still obtain virus definitions from a 12.1.x Endpoint Protection Manager. This is not a recommended or supported configuration, and should only be considered to maintain protection while completing the upgrade to SEP 12.1.x.
  • Intrusion Prevention, Proactive Threat Protection and all other content will not be available for download through any means.
• Endpoint Protection 11.0.x will no longer be supported by Technical Support.
  • If a problem does occur, your only course of action with Technical Support will be to upgrade to Endpoint Protection 12.1.x. All other requests for support will be denied.

Frankly, I'm surprised 11.x can update anything being this far out from EOSL.

But if your client is green and showing the latest content update applied then you should be fine...for now. But nothing is guaranteed.

I sure wish I had a date that I can tell management that we will NO LONGER GET UPDATES! Ha, sometimes it is the only thing that will get their attention.

The date is January 5th, 2015. Anything after that is untested/unsupported.

While I understand how management thinks especially since you're still getting sporadic updates, the 11.x product is no longer supported and should be considered vulnerable. But again, this is management you're dealing with. Been there, done that.