Content Cache Directory
Content that arrives on the Symantec Endpoint Protection Client is cached on disk. The default number of cached revisions is either 3 or 5 depending on your Symantec Endpoint Protection version. AV and IPS content is always cached, no matter what channel it used to get there. Other content types are cached for all channels except the LiveUpdate server channel. The cache directories are as follows:
- Symantec Endpoint Protection 11.0.1 or older
- All content is typically under c:\Program Files\Symantec\Symantec Endpoint Protection\ContentCache
- Symantec Endpoint Protection 11.0.2 or newer
- AV content: C:\Program Files\Common Files\Symantec Shared\VirusDefs
- IPS content: C:\Program Files\Common Files\Symantec Shared\SymcData\cndcipsdefs
- All other content is typically under c:\Program Files\Symantec\Symantec Endpoint Protection\ContentCache
- Symantec Endpoint Protection 12.1 or newer
- All content is typically under C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\ContentCache
If you are unsure if new content has made it to the client and been installed, check the cache. Content that arrives but fails to install will not be cached