Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Legacy SEP11 files waste disk space after upgrade to SEP12.1

Created: 12 Feb 2013 • Updated: 13 Feb 2013 | 4 comments
This issue has been solved. See solution.

 

Hi,

After we updated our environment from SEP11 to SEP12.1 we detected a lot of “legacy” files on our servers:

  • C:\ProgramData\Symantec\Definitions – between 1 and two 2 GB
  • C:\ProgramData\Symantec\LiveUpdate – between 1KB and 900 MB

 

It looks like the files are not getting used anymore.

 

Can these files get deleted?

Is it normal that they don´t get removed during the upgrade from SEP11 to 12?

 

Thanks

Comments 4 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

This is a normal. Eventually these files would be deleted.

I hope you have migrated to the Latest version of SEP 12.1 RU2

Symantec Endpoint Protection 12.1 will keep 1 definition set

Symantec Endpoint Protection 11.x will keep 3 definition sets at any time: the current set and the last 2.

Disk Space Management procedures for the Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH96214

Drive Space used by Virus Definitions Updates

http://www.symantec.com/docs/TECH141811

Also, check this Thread with similar Issue - 

https://www-secure.symantec.com/connect/forums/virusdefs-folder-over-10gb-size-servers

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SOLUTION
Zebbelin's picture

Thanks!

We will go forward and clean out:

  • C:\ProgramData\Symantec\LiveUpdate\
  • C:\ProgramData\Symantec\Definitions

 

What a pity that the setup routine does not clean that stuff..

And yes we updated to 12.1RU2.

.Brian's picture

The virus defs can be removed if they are old. SEP 11.x kept 3 revisions and SEP 12.1 will only keep 1.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

SebastianZ's picture

You mean the SEP 12.1 client here?

C:\ProgramData\Symantec\LiveUpdate\Downloads - you can remove everything from here manually - SEP 12.1 client won't use this anymore. If there is Liveupdate still installed on the client machine you can deinstall it as well if no other Software is using it.

 

C:\ProgramData\Symantec\Definitions - this is same path used both by sep 11 and 12.1 you can leave it for now - SEP will clean it up automatically eventually.