Endpoint Protection

Hi,

After we updated our environment from SEP11 to SEP12.1 we detected a lot of “legacy” files on our servers:

• C:\ProgramData\Symantec\Definitions – between 1 and two 2 GB
• C:\ProgramData\Symantec\LiveUpdate – between 1KB and 900 MB

It looks like the files are not getting used anymore.

Can these files get deleted?

Is it normal that they don´t get removed during the upgrade from SEP11 to 12?

Thanks

Hello,

This is a normal. Eventually these files would be deleted.

I hope you have migrated to the Latest version of SEP 12.1 RU2

Symantec Endpoint Protection 12.1 will keep 1 definition set

Symantec Endpoint Protection 11.x will keep 3 definition sets at any time: the current set and the last 2.

Disk Space Management procedures for the Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH96214

Drive Space used by Virus Definitions Updates

http://www.symantec.com/docs/TECH141811

Also, check this Thread with similar Issue - 

https://www-secure.symantec.com/connect/forums/virusdefs-folder-over-10gb-size-servers

Hope that helps!!

The virus defs can be removed if they are old. SEP 11.x kept 3 revisions and SEP 12.1 will only keep 1.

You mean the SEP 12.1 client here?

C:\ProgramData\Symantec\LiveUpdate\Downloads - you can remove everything from here manually - SEP 12.1 client won't use this anymore. If there is Liveupdate still installed on the client machine you can deinstall it as well if no other Software is using it.

C:\ProgramData\Symantec\Definitions - this is same path used both by sep 11 and 12.1 you can leave it for now - SEP will clean it up automatically eventually.

Thanks!

We will go forward and clean out:

• C:\ProgramData\Symantec\LiveUpdate\
• C:\ProgramData\Symantec\Definitions

What a pity that the setup routine does not clean that stuff..

And yes we updated to 12.1RU2.