Endpoint Protection

Hello evri one,
i use a  SEPM 11 on a wins 2003 dedicated server i recently reinstalled the symantec SEPM and the LU administrator and i av not been able to get recent antivirus definitions distributed tio clients. i checked the C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads
which is the default for installation, and only the minitri .flg file is downloaded. also on the symantec manager console i noticed that the Latest symantec verion is been updated but the latest manager version is not updated. iguess this is why clients are not getting the or lates antivurus definitions as seen .
please please giv me help as much as u can thank u

Yes, if latest manager versions shows out-of-date definitions then liveupdate is failing on SEPM and hence the clients do not have the latest definitions. -- Login to the SEPM console -- Click on Admin>Servers>Local Site -- Click on Download liveupdate content option -- Check if SEPM successfully completes the liveupdate -- If not you may see an error like "Return code=4" if it fails. The following article might be useful to resolve this, "Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/3b09d4f329acc39fc12573b400341977?OpenDocument If this does not help, post the log.liveupdate file from C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate folder for analysis Thanks :-)

If the Latest symantec version updated & the latest manager version not updated this means that the manager is able to contact the symantec site & is also be able to download the definitions.. But what is happening is that it is not able to install the definistions.. There multipal reason for the same.. One known cause is the current def are corrupt..

You may try the following setps..

- Go control panal dubble click liveupdate.. Changed it to Interactive Mode.
- Go to strat & run type -- Luall.exe.. this start the liveupdate.. once this is strated check each tab & try to find out if the liveudpate is able to install the new defs.. If not then ..

- You may need to uninstall the liveupdate delete all the liveupdate folder & re-install the same.. find the document below to do the same..

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100907303548
 

Also,  It is technically possible to run both LUA and SEPM on the same physical server, but this is not a recommend or supported configuration

Title: 'LiveUpdate Administrator 2.x and Symantec Endpoint Protection Manager on the Same Physical Server'
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008060510124848?Open&seg=ent

Here is my captured from my SEPM...something strange...I do everything above, but nothing changes.
It happen since transition from 2009 to 2010. I really have no idea. Should I change my SEPM.
Just for info, I used SEPM Ver.11.0.4202.75.

Check the following article:

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010010308571348

Aniket

Wow... after read that article, I'm glad...but sad too, because I must made report every week for status of my client. And when displaying about Vir. Def...it  could be hard question to answer.
So how long I must wait...?

Hi,

This is a temporary issue and should not last long. So, if you take a weekly report, it may be hampered with this issue for not more than 1 week.

We will definitely post an update as soon as this issue is resolved.

Aniket

Hi,

It also happened to me, btw the link of article given don't have any article?

TQ

How about this:

https://www-secure.symantec.com/connect/forums/official-status-sepm-definitions-stay-31-12-2009-last-updated-04-jan-2010<o p=""></o>

 

Aniket

Try this link instead. https://www-secure.symantec.com/connect/forums/official-status-sepm-definitions-stay-31-12-2009-last-updated-04-jan-2010

At first I thought about a "good joke" on Symantec. But now ... got the same issue

After all i agree with susika, Symantec have sense of humor... :)

Apoligies for the non functional link.

:-)

Aniket

Hello, revision 117 is currently the latest as of now.

Finally Symantec find the way...
Thanks...

To AL76 : this captured from my SEPM console...no hoax....

Thanks For the information

Good day, revision 118 is currently the latest as of now.

For both of my Managed and Unmanaged clints, Upto 31- december -2009 the update was working. But dont know what happened after that. If anyone know Pls help me.

Saaj, we have a known issue with SEPM processing date, and as long you see the date is at 31 Dec 2009, with revision 118 (as of now), you would be protected. We are working to release fix for this.

Additional information can be track from here.
https://www-secure.symantec.com/connect/forums/official-status-sepm-definitions-stay-31-12-2009-last-updated-04-jan-2010

Something on SEPM very annoying me, my Latest Manager Version not same with Latest Symantec Version. After runing LuCatalog, there's no error. I think it could be there no newest patch for SEPM according this link https://www-secure.symantec.com/connect/forums/official-status-sepm-definitions-stay-31-12-2009-last-updated-13-jan-2010 and http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010010308571348.

Am I right?
Thank you for any kind of information.... And still waiting solution from Symantec....

My Symantec Version just unavailable, while Manager Version dates back 2009-12-31 rev 129
How do i update that and also shows Latest Symantec Version?

@aulia, which version of SEPM are you using? We have released fixed for both MR3 and RU5, if yours is either one of these 2 version, check the registry key if the patch has been installed. If not manually trigger a download from your SEPM console.

HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SEPM\PatchSequence (32bit 11.0.x)
HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SPC\PatchSequence (32bit 12.0.x SBE)
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\SEPM\PatchSequence (64bit 11.0.x)
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\SPC\PatchSequence   (64bit 12.0.x SBE)

Refer to KB https://www-secure.symantec.com/connect/forums/official-status-sepm-definitions-stay-31-12-2009-last-updated-13-jan-2010 for more information.

I use SEPM MR4. On other should I upgrade my SEPM? on other server, the definition not displayed like this picture below

so I can not grab report for virus definition. Any explanation about this?
This problem really confused... :(

 The fix has only been released for MR5 and MR3 fix for MR4 should release today or tommorow.
However I would suggest upgrade to MR5