Endpoint Protection

 View Only
  • 1.  Liveupdate saying updates available but 0 updates installed

    Posted May 07, 2015 12:40 AM

    When I run Live update today (on 4 different computers)'

    It downlods the catalogs

    then says

    Update available for Virus and Spyware Definistions Win32 (hub)

    Update available for Virus and Spyware Definitions Win32.

    but then says

    0 update(s) have been downloaded

    Session summary: 2 updates(s) available, 0 update(s) installed

    LiveUpdate sessions is complete.

     

    Is there some definitions issues?



  • 2.  RE: Liveupdate saying updates available but 0 updates installed

    Posted May 07, 2015 12:47 AM

    What defination showing in SEP client ?

    it's unmanaged client or managed client.

    run the symhelp tool and definitions are corrupt or not.

    Troubleshooting computer issues with the Symantec Help support tool

    https://support.symantec.com/en_US/article.HOWTO80839.html

    How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually

    https://support.symantec.com/en_US/article.HOWTO59193.html



  • 3.  RE: Liveupdate saying updates available but 0 updates installed

    Trusted Advisor
    Posted May 07, 2015 01:03 AM

    Hello,

    What version of Symantec Endpoint Protection (SEPM and SEP clients) are you running on your machines?

    Are these machines taking updates from SEPM / GUP/ Internet?

    Currently, what version of definitions do you see on your machines?

    Does this happen only on those 4 machines, or all the client machines?

    NOTE: SEP 11.x is end of support life and no longer receives definitions. You need to move to SEP 12.1 as soon as possible.

    Symantec Endpoint Protection 11.0.x End of Support Life.

    Upgrade or migrate to Symantec Endpoint Protection 12.1.5

    Regards,



  • 4.  RE: Liveupdate saying updates available but 0 updates installed

    Posted May 07, 2015 01:28 AM

    All are running 12.1.5 (12.1 RU5) build 5337.

    One is a managed machine which can request updates from the internet, other three are unmanaged and brand new installs and update from the internet - these are the only 4 I have tried to manuall update.

    The new installs have waiting for updates under virus and spyware protection other one has 6 May 2015 r9

     

    Does anyone else see the samewhen they run liveupdate - my thinking is its happeing for everyone?



  • 5.  RE: Liveupdate saying updates available but 0 updates installed

    Posted May 07, 2015 01:34 AM

    Download the symantec diagnose tool and run on one of the infected system, it help to find the reason of failure and solution article

    Article URL: http://www.symantec.com/docs/TECH170752



  • 6.  RE: Liveupdate saying updates available but 0 updates installed

    Trusted Advisor
    Posted May 07, 2015 02:35 AM

    Hello,

    You could check the latest version of definitions from -

    http://www.symantec.com/security_response/definitions.jsp

    File-Based Protection (Traditional Antivirus)

    Traditional signature and heuristic file scanning engines form the backbone of Symantec’s security solutions; these engines use dozens of techniques to scan files for both known as well as unknown threats.
    • Definitions Created: 5/6/2015
    • Definitions Released: 5/6/2015
    • Extended Version: 5/6/2015 rev. 9

    You could try updating the definitions on your client machines via Intelligent Updater -

    Check these Articles:

    How to update definitions for Symantec Endpoint Protection using the Intelligent Updater

    http://www.symantec.com/docs/TECH102606

    Using Intelligent Updater files to update client virus and security risk definitions

    http://www.symantec.com/docs/HOWTO80903

    Regards,



  • 7.  RE: Liveupdate saying updates available but 0 updates installed

    Posted May 07, 2015 07:54 AM
      |   view attached

    Hi fellow Chris,

    I'm pleased to see someone else with perhaps the same issue... fresh installations of SEP 12.1.5, unmanaged, unable to update (though not issues with the installation procedure).

    In my case, both are installed on fresh installations of Win 8.1 64-bit, from MS DVDs (not images) (one straight Win 8.1, the other Win 8.1 Enterprise). All Windows Updates performed prior to SEP installation. Two different models of Dell laptop. I've tried over wired, wireless and even ADSL wired and all fail.

    (Note: a Win 7 Enterprise laptop with version 12.1.4 works over wireless - the Win 7 machine is not a fresh install, so will already have a recent update, but it did request updates just now and that went through successfully. Also, my desktop is Win 8.1 Enterprise 64 bit, with 12.1.4).

    'Virus and Spyware Protection definitions are out of date.' > I click on the 'Fix' button to rectify this > I click 'OK' to the confirmation box. If I look at Task Manager I can see 'Symantec Service Framework' is using the CPU (hovering around 30-40% CPU for around about a minute).

    In the Client 'System' logs I get plenty of "symantec endpoint protection postsession callback failed (208)". And similar errors to your errors - 2 updates to install, 0 installed, etc.

    On one laptop I tried 12.1.4 before uninstalling, rebooting and trying 12.1.5. Both versions have the same issue.

    I've used 12.1.4 many times before when setting up Win 8.1 laptops manually from scratch and not had an issue with LiveUpdate. This seems to be a recent thing (within last month maybe?). Could there be a Win update mucking things up? Chris - did you perform and Win updates before installing SEP?

    Sadly I've had to give the laptops to the users already, so don't have them to test at the moment.

    Before I had to give them back, I got to run the Symantec Help tool on one... two things came up with red circles / white crosses through them:

    "System does not meet the requirements for Symantec Endpoint Protection 12.1: Remote install".

    "Disable the Windows AutoRun feature".

    (Attached is the output file from the scan).

    Otherwise fine.

    Any thoughts? Would you folks at Symantec have a freshly built Win 8.1 machine to-hand, all Windows Updates performed, and see how it gets on with 12.1.5 fresh installation...?

    Chris

    Attachment(s)



  • 8.  RE: Liveupdate saying updates available but 0 updates installed

    Posted May 07, 2015 08:07 AM

    Did you run the symhelp tool on it?



  • 9.  RE: Liveupdate saying updates available but 0 updates installed

    Posted May 07, 2015 08:16 AM

    Hi Brian,

    Thank you for the speedy reply.

    Yes, I just managed to run the Symantec Help tool on my Win 8.1 (not Enterprise) machine, just before having to give the machine back to the end user. Two things came up with red circles / white crosses through them:

    "System does not meet the requirements for Symantec Endpoint Protection 12.1: Remote install".

    "Disable the Windows AutoRun feature".

    Otherwise things looked good. The file that the scan outputted has been zipped and attached in my previous reply. Don't know if that's any help? :-S

    I've just this minute pulled a Sony Vaio Pro 13 from off our shelf. SEP 12.1.4, Windows 8.1 Ent. Neither Windows or SEP have been updated since March 27th this year. I've just clicked "Fix" to update the definitions in SEP and it's gone through fine. Using same wifi network as the other two machines. All Windows settings are default fresh install settings (same as with the troubled machines).

    I didn't update Windows Updates on the Vaio before updating SEP. Perhaps that would have been a good test? I guess I can manually get rid of the definitions and run Windows Update and THEN try LiveUpdate and see if that mucks it up? (You can never be too sure that a Windows Update doesn't mess things up...?). 

    Any thoughts?

    Many thanks for the speedy one Brian :-)

    Chris



  • 10.  RE: Liveupdate saying updates available but 0 updates installed

    Posted May 07, 2015 09:02 AM

    I popped a reply in about 20 mins ago, but it's not showing... I didn't copy it, but it went something like this...

    --

    Hi Brian,

    Many thanks for the speedy reply. Hope you're having a good day :-)

    Before I had to give the laptops to my end users, I got to run the Symantec Help tool on one (Win 8.1 NOT Enterprise, all Windows Updates done).... two things came up with red circles / white crosses through them:

    "System does not meet the requirements for Symantec Endpoint Protection 12.1: Remote install".

    "Disable the Windows AutoRun feature".

    No other failures. (See attachment to my first reply for the output from the Sym Help scan... if that's any use?).

    Many thanks again,

    Chris