Gather current virus definitions and intrusion prevention signatures
1. Navigate to the current virus definitions within the Endpoint Manager content folder. The default path is:
C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{C60DC234-65F9-4674-94AE-62158EFCA433}
2. Within the "{C60DC234-65F9-4674-94AE-62158EFCA433}" folder there will be several numbered folders. Open the newest of these folders.
To determine the age of the folders click View, then click Details. The newest folder will have the most recent Date Modified value.
3. Copy the file labeled "full.zip" and paste it to the desktop.
On the desktop, rename the copy from "full.zip" to "vdefhub.zip"
4. Navigate to the current intrusion prevention signatures within the Endpoint Manager content folder. The default path is:
C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{D3769926-05B7-4ad1-9DCF-23051EEE78E3}
5. Within the "{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" folder there will be several numbered folders. Open the newest of these folders.
To determine the age of the folders click View, then click Details. The newest folder will have the most recent Date Modified value.
6. Copy the file labeled "full.zip" and paste it to the desktop.
On the desktop, rename the copy from "full.zip" to "IPSDef.zip"
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007110513361348
Navigate to the exported package.
Replace vdefhub.zip and IPSDef.zip within the exported package folder with the ones created above.
Clients deployed using this package will install with the modified virus definition and intrusion prevention signatures.
Export a client installation package that is not a single executable.
To export a client installation package please refer to the following document:
Creating custom Client Installation packages in the Symantec Endpoint Protection Manager Console
Export a client installation package