Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Live Update

Created: 13 Sep 2012 • Updated: 16 Sep 2012 | 7 comments
NMG's picture
This issue has been solved. See solution.

At what time is the daily update (LU) realeased?

Discussion Filed Under:

Comments 7 CommentsJump to latest comment

Ashish-Sharma's picture

hi,

No Specify Time but Release 3 times in a day

Symantec typically releases 1 to 3 sets of Virus and Spyware definitions a day.

http://www.symantec.com/business/support/index?page=content&id=HOWTO53175

Thanks In Advance

Ashish Sharma

 

 

SOLUTION
Mithun Sanghavi's picture

Hello,

Check this Article: 

Virus Definition Update FAQ http://www.symantec.com/docs/TECH103326

and

Check this Thread: https://www-secure.symantec.com/connect/forums/best-time-run-liveupdate

With SEP (and I assume all future versions) we release definitions three times a day.

There's no set time that we release defs on/by.  We try to aim for early morning/noonish/later afternoon releases, but this obviously is at the mercy of QA...if we find that we've got broken definitions in one of the updates, the updates might be early morning/later afternoon/early evening, as an example.

By default, SEPM runs LiveUpdate every four hours...doing this means that it runs six times a day, with enough "overlap" to ensure that updates are downloaded near the time that they're released.

Full details on the releases can be found on the Multiple Daily Definitions - Detections Added page.

SEP 11 and SEP 12.1 have Multiple Daily Definitions (MDD's) so that even if a threat was first seen on the Internet that morning, by that afternoon or evening protection will be available. 

Final note: once per month, there are large hub definitions which must be downloaded for SEP 11 and current releases of SEP 12.1.  These will result in a spike of several GB for a day or two around the middle of the month, which is normal.

Reference: https://www-secure.symantec.com/connect/articles/how-big-are-current-symantec-endpoint-protection-definitions

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

NMG's picture

I don't think that is correct, it is released some time in the evening in PST timezone. I had read it some where, but now I am not able to find that.

Mithun Sanghavi's picture

Hello,

Did you check the Article and Thread above?

Check these Articles: 

Virus Definition Update FAQ http://www.symantec.com/docs/TECH103326

How often are Endpoint Protection definitions for IPS, SONAR, and Download Protection released? http://www.symantec.com/docs/TECH178271

and

Check this Thread: https://www-secure.symantec.com/connect/forums/best-time-run-liveupdate

Hope that helps!!

 

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Swapnil khare's picture

Check this might help

http://www.symantec.com/business/support/index?page=content&id=TECH178271&actp=search&viewlocale=en_US&searchid=1347542866448

File-based AV - Updated daily (typically three times a day Monday through Friday; one time a day on weekends).

Network-Based Protection (IPS)- Updated on Weekdays (M-F - no releases scheduled for weekend or major holidays in the United States).

Behavior-Based Protection / Proactive Threat Protection - There is no set schedule.

Reputation-Based Protection (Insight) - Continually updated as it is a cloud based detection.

 

For additional details please visit: http://www.symantec.com/security_response/definitions.jsp

 

 

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

 

Swapnil khare's picture

These content are posted on Akamai servers which are across globe.Again it may vary from time zones if i am not wrong the first set of Released EST , CST and then PST .

Again this is what i have noticed in my network some one might confirm.

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.