Endpoint Protection

Hi Everyone,

How to manually force update all of the virus Definition in SEP 11 MR6 MP1 ?

I have perform the live update download using Start | run | "luall"

but then the definition is not yet pushed to the clients ?

see the following status:

Thanks

The SEP client can get the definitions from SEPM by default. 

If you want to manually update the definition on client, choose the client group and run the command 'Update Content'.

And, on the other hand, you can try to verify the communication between the SEPM and SEP which the definitions not updated. Maybe the communication between these SEP clients and SEPM were lost.

Thumbs up to Yang, however the client will get the updates from the SEPM only based on the configured HeartBeat.

Hey guys,

Well Pete and Yang are actually right...but what Yang said would be the best option here.

Albert,

Sometimes it takes a while to deploy the new virus defs to the clients, would you mind to check the number again and see if they changed?

Take care

JB

The time is more in this case as the clients need to take 13 days defs (comparing symantec defs and your manager definitions)

this is the cause for the delay.

To remind you, the "Update Content" command will only prompt the client to launch LiveUpdate.  It does not prompt the clients to connect or heartbeat into the SEPM.

In the screenshot you've provided, the "Windows Latest Manager version" says 9/13.   This means the SEPM itself is failing to update--so the clients are not updating, and the ones that are updated beyond 9/13, they are probably running LiveUpdate independently.

What happens if you run LUALL on the SEPM itself?  Any error messages?

sandra

I have seen exactly what it looks like your seeing from time time.  I just reboot my SEPM server and it starts pushing out the update.

You could create a simple Windows batch file, that will copy and launch/update the virus defs from the latest intelligent updater file. If only 23 computers need, the batch could be very simple using PSexec. 

Something like this might to the trick:

nope, even worst now:

After the system restart I got Event ID Error like the following:

you may need to repair the SEPM by going to add/remove program , click on  Symantec Endpoint Protection Manager ---> click on change  and select repair.

Paste/attach the scm-server-0.log which is present in Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\logs

Coud you also paste the catalina.out?

I have not encountered "a code of 2" when it comes to Java Virtual Machine errors, nor could I find a KB article.  If you repair the SEPM--a recommendation I would second, as this worked for another user--be sure that you're doing so either while local to the computer, or in a remote session that's console.

See why console is important:  "Product corruption or failure appears during an installation or migration while using an improperly configured remote session."

sandra

strangely enough, after i do the "repair" of the installation it seems that it works fine again plus the proxy credentials in the settings