Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Latest symantec version updating but the latest manager version not updating

Updated: 16 Jul 2010 | 25 comments
olusoji's picture
0 0 Votes
Login to vote

Hello evri one,
i use a  SEPM 11 on a wins 2003 dedicated server i recently reinstalled the symantec SEPM and the LU administrator and i av not been able to get recent antivirus definitions distributed tio clients. i checked the C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads
which is the default for installation, and only the minitri .flg file is downloaded. also on the symantec manager console i noticed that the Latest symantec verion is been updated but the latest manager version is not updated. iguess this is why clients are not getting the or lates antivurus definitions as seen .
please please giv me help as much as u can thank u

Comments

Here2Help's picture
25
Aug
2009
0 Votes 0
Login to vote

Yes, if latest manager

Yes, if latest manager versions shows out-of-date definitions then liveupdate is failing on SEPM and hence the clients do not have the latest definitions.

-- Login to the SEPM console
-- Click on Admin>Servers>Local Site
-- Click on Download liveupdate content option
-- Check if SEPM successfully completes the liveupdate
-- If not you may see an error like "Return code=4" if it fails.

The following article might be useful to resolve this,

"Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager

http://service1.symantec.com/support/ent-security....

If this does not help, post the log.liveupdate file from C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate folder for analysis

Thanks :-)

Regards,
AMOL BHOSALE
SCTS, MCP

Saeed's picture
25
Aug
2009
0 Votes 0
Login to vote

Hi Oluoji

If the Latest symantec version updated & the latest manager version not updated this means that the manager is able to contact the symantec site & is also be able to download the definitions.. But what is happening is that it is not able to install the definistions.. There multipal reason for the same.. One known cause is the current def are corrupt..

You may try the following setps..

- Go control panal dubble click liveupdate.. Changed it to Interactive Mode.
- Go to strat & run type -- Luall.exe.. this start the liveupdate.. once this is strated check each tab & try to find out if the liveudpate is able to install the new defs.. If not then ..

- You may need to uninstall the liveupdate delete all the liveupdate folder & re-install the same.. find the document below to do the same..

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100907303548
 

If a forum post solves your problem, please flag it as a solution. If you like an article, blog post or download vote it up.
 

Prachand's picture
25
Aug
2009
1 Vote +1
Login to vote

  How to troubleshoot

  How to troubleshoot   "Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager
---->Check for proxy in the network
----> Windows  Enhanced Security in Internet Explorer should be disabled
---->Uninstall Liveupdate
---->Delete C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate Liveupdate folder
---->Reinstall LiveUpdate
---->Register Liveupdate to SEPM
      Open the command prompt browsed to:
      C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
               Type lucatalog –cleanup press enter
            Then type lucatalog –update  press enter
---->Run  Liveupdate from SEPM..
       Login to the SEPM console
 Click on Admin>Servers>Local Site
 Click on Download liveupdate content
 Once finished Click live update download to See if SEPM is updated or not
 

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

Prachand's picture
25
Aug
2009
1 Vote +1
Login to vote

Also,  It is technically

Also,  It is technically possible to run both LUA and SEPM on the same physical server, but this is not a recommend or supported configuration

Title: 'LiveUpdate Administrator 2.x and Symantec Endpoint Protection Manager on the Same Physical Server'
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008060510124848?Open&seg=ent

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

aulia's picture
04
Jan
2010
0 Votes 0
Login to vote

It happened to me too.....

caputered.JPG

Here is my captured from my SEPM...something strange...I do everything above, but nothing changes.
It happen since transition from 2009 to 2010. I really have no idea. Should I change my SEPM.
Just for info, I used SEPM Ver.11.0.4202.75.

Aniket Amdekar's picture
04
Jan
2010
0 Votes 0
Login to vote

Check the following

Check the following article:

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010010308571348

Aniket

aulia's picture
04
Jan
2010
0 Votes 0
Login to vote

Wow... after read that

Wow... after read that article, I'm glad...but sad too, because I must made report every week for status of my client. And when displaying about Vir. Def...it  could be hard question to answer.
So how long I must wait...?

Aniket Amdekar's picture
04
Jan
2010
0 Votes 0
Login to vote

Hi, This is a temporary issue

Hi,

This is a temporary issue and should not last long. So, if you take a weekly report, it may be hampered with this issue for not more than 1 week.

We will definitely post an update as soon as this issue is resolved.

Aniket

Ahmad Faizal's picture
04
Jan
2010
0 Votes 0
Login to vote

No Article

Hi,

It also happened to me, btw the link of article given don't have any article?

TQ

Aniket Amdekar's picture
04
Jan
2010
0 Votes 0
Login to vote

How about

How about this:

Normal
0

false
false
false

EN-US
X-NONE
X-NONE

MicrosoftInternetExplorer4

https://www-secure.symantec.com/connect/forums/official-status-sepm-definitions-stay-31-12-2009-last-updated-04-jan-2010

 

Aniket

AL76's picture
05
Jan
2010
0 Votes 0
Login to vote

Link

Try this link instead. https://www-secure.symantec.com/connect/forums/off...

Alan Lee

Principal Regional Product Manager, Enterprise Security Group, Symantec

susika's picture
05
Jan
2010
0 Votes 0
Login to vote

At first I thought about a

At first I thought about a "good joke" on Symantec. But now ... got the same issue

aulia's picture
05
Jan
2010
0 Votes 0
Login to vote

After all i agree with

After all i agree with susika, Symantec have sense of humor... :)

Aniket Amdekar's picture
05
Jan
2010
0 Votes 0
Login to vote

Apoligies for the non

Apoligies for the non functional link.

:-)

Aniket

aulia's picture
06
Jan
2010
0 Votes 0
Login to vote

Finally Symantec find the

sep.JPG

Finally Symantec find the way...
Thanks...

To AL76 : this captured from my SEPM console...no hoax....

AL76's picture
05
Jan
2010
0 Votes 0
Login to vote

rev 117

Hello, revision 117 is currently the latest as of now.

Alan Lee

Principal Regional Product Manager, Enterprise Security Group, Symantec

IT secuirty's picture
06
Jan
2010
0 Votes 0
Login to vote

Thanks For the information

Thanks For the information

AL76's picture
06
Jan
2010
0 Votes 0
Login to vote

rev 118

Good day, revision 118 is currently the latest as of now.

Alan Lee

Principal Regional Product Manager, Enterprise Security Group, Symantec

Saaj's picture
06
Jan
2010
0 Votes 0
Login to vote

NOT Updating AFter 31-December-2009

For both of my Managed and Unmanaged clints, Upto 31- december -2009 the update was working. But dont know what happened after that. If anyone know Pls help me.

AL76's picture
06
Jan
2010
0 Votes 0
Login to vote

OFFICIAL STATUS: SEPM Definitions stay at 31-12-2009

Saaj, we have a known issue with SEPM processing date, and as long you see the date is at 31 Dec 2009, with revision 118 (as of now), you would be protected. We are working to release fix for this.

Additional information can be track from here.
https://www-secure.symantec.com/connect/forums/off...

Alan Lee

Principal Regional Product Manager, Enterprise Security Group, Symantec

aulia's picture
14
Jan
2010
0 Votes 0
Login to vote

SEP Manager Definition not update afer 15 day... :(

sep2.JPG

Something on SEPM very annoying me, my Latest Manager Version not same with Latest Symantec Version. After runing LuCatalog, there's no error. I think it could be there no newest patch for SEPM according this link https://www-secure.symantec.com/connect/forums/official-status-sepm-definitions-stay-31-12-2009-last-updated-13-jan-2010 and http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010010308571348.

Am I right?
Thank you for any kind of information.... And still waiting solution from Symantec....

AL76's picture
15
Jan
2010
0 Votes 0
Login to vote

Reply to aulia

@aulia, which version of SEPM are you using? We have released fixed for both MR3 and RU5, if yours is either one of these 2 version, check the registry key if the patch has been installed. If not manually trigger a download from your SEPM console.

HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SEPM\PatchSequence (32bit 11.0.x)
HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SPC\PatchSequence (32bit 12.0.x SBE)
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\SEPM\PatchSequence (64bit 11.0.x)
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\SPC\PatchSequence   (64bit 12.0.x SBE)

Refer to KB https://www-secure.symantec.com/connect/forums/official-status-sepm-definitions-stay-31-12-2009-last-updated-13-jan-2010 for more information.

Alan Lee

Principal Regional Product Manager, Enterprise Security Group, Symantec

Mabelas's picture
14
Jan
2010
0 Votes 0
Login to vote

Latest symantec Version - Information is currently unavailable

My Symantec Version just unavailable, while Manager Version dates back 2009-12-31 rev 129
How do i update that and also shows Latest Symantec Version?

aulia's picture
15
Jan
2010
0 Votes 0
Login to vote

I use SEPM MR4. On other

I use SEPM MR4. On other should I upgrade my SEPM? on other server, the definition not displayed like this picture below
SEP3.JPG
so I can not grab report for virus definition. Any explanation about this?
This problem really confused... :(

Vikram Kumar-SAV to SEP's picture
15
Jan
2010
0 Votes 0
Login to vote

 The fix has only been

 The fix has only been released for MR5 and MR3 fix for MR4 should release today or tommorow.
However I would suggest upgrade to MR5