Intrusion Prevention Signature Failures
Created: 15 Jan 2012 | 10 comments
My company uses SEPM to manage clients,however in the SEPM Console its showing Intrusion Prevention Signature Out-of-Date for some computers that have already being updated via scheduled updates from SEPM.
Please solve
Discussion Filed Under:
Comments 10 Comments • Jump to latest comment
What is the SEPM version ?
if the clients are already updated and is SEPM 12.1, check this link and let know if it resolves your issue
http://www.symantec.com/business/support/index?page=content&id=TECH164272
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Hi Pete,
The message showing on the SEPM12.1 console says Intrusion Prevention Signature Failures;
Try changing the date format, and see if that helps?
Thums Up to Simpson's advice!!
Go through the following link:
http://www.symantec.com/business/support/index?page=content&id=TECH164272
May this help you!!
Regards,
Avkash K
Check this:
http://www.symantec.com/docs/TECH103087
Fix ID: 2240928/2376877
Symptom: In some areas of Symantec Endpoint Protection Manager reporting, IPS signature data is inconsistent or incorrect. Affected areas include:
Solution: The Symantec Endpoint Protection Manager queries were modified to show the correct IPS client data.
Let me know if this helps.
Thanks & Regards,
AR Sharma, CISSP
IBM Certified System Admin- Lotus Domino V7
ITIL V2 Certified
Since the end user is using SEP 12.1, I would reiterate to try changing the date format and let know if it helps.
http://www.symantec.com/business/support/index?page=content&id=TECH164272
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Hi Kovera,
check this it helps you,
Hello,
Is the client updated?
What is the date format selected?
See if this link helps
http://www.symantec.com/business/support/index?page=content&id=TECH164272
This is a reporting issue, we are aware of the problem. Your clients are still updating.
The short term fix would be to either increase your Download Protection and IPS thresholds or to switch to using the US date format for reporting temporarily.
Again, Updating to 12.1 RU1 fixes the problem.
See the below link on how to upgrade 12.1 to RU1:
Upgrading or migrating to Symantec Endpoint Protection 12.1.1000 (RU1)
http://www.symantec.com/business/support/index?page=content&id=TECH174545
Hope that helps!!
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3
Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a
Can somebody help.
Our company's SEPM 12.1 console is showing error message "Intrusion Prevention Signature Failures?Any solutions?
did you change the date format?
what was teh date format and to what did you changed?
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Would you like to reply?
Login or Register to post your comment.