Video Screencast Help

Legacy SEP11 files waste disk space after upgrade to SEP12.1

Created: 12 Feb 2013 • Updated: 13 Feb 2013 | 4 comments
This issue has been solved. See solution.


After we updated our environment from SEP11 to SEP12.1 we detected a lot of “legacy” files on our servers:

  • C:\ProgramData\Symantec\Definitions – between 1 and two 2 GB
  • C:\ProgramData\Symantec\LiveUpdate – between 1KB and 900 MB

It looks like the files are not getting used anymore.

Can these files get deleted?

Is it normal that they don´t get removed during the upgrade from SEP11 to 12?


Comments 4 CommentsJump to latest comment

Mithun Sanghavi's picture


This is a normal. Eventually these files would be deleted.

I hope you have migrated to the Latest version of SEP 12.1 RU2

Symantec Endpoint Protection 12.1 will keep 1 definition set

Symantec Endpoint Protection 11.x will keep 3 definition sets at any time: the current set and the last 2.

Disk Space Management procedures for the Symantec Endpoint Protection Manager

Drive Space used by Virus Definitions Updates

Also, check this Thread with similar Issue -

Hope that helps!!

Mithun Sanghavi
Associate Security Architect


Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Zebbelin's picture


We will go forward and clean out:

  • C:\ProgramData\Symantec\LiveUpdate\
  • C:\ProgramData\Symantec\Definitions

What a pity that the setup routine does not clean that stuff..

And yes we updated to 12.1RU2.

ᗺrian's picture

The virus defs can be removed if they are old. SEP 11.x kept 3 revisions and SEP 12.1 will only keep 1.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

SebastianZ's picture

You mean the SEP 12.1 client here?

C:\ProgramData\Symantec\LiveUpdate\Downloads - you can remove everything from here manually - SEP 12.1 client won't use this anymore. If there is Liveupdate still installed on the client machine you can deinstall it as well if no other Software is using it.

C:\ProgramData\Symantec\Definitions - this is same path used both by sep 11 and 12.1 you can leave it for now - SEP will clean it up automatically eventually.