Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

Minimum Hard Disk Free Spcae for clients Virus defnition updates

Created: 19 Dec 2012 • Updated: 27 Dec 2012 | 6 comments
This issue has been solved. See solution.

Hi All,

Good Day to All......

We are using SEP 12.1 RU1 MP 1 on Win 2k8 Ent R2 Server in our environment, and around 4000 clients and all clients are taking updates from SEPM (while they are in office) and we have noticed that clients which having less than 1 Gb free space on C drive is not updating, their virus definitions but SONAR, IPS, Download Protection are getting updated properly.

Please suggest.

Thanks in Advance

Ajin

Comments 6 CommentsJump to latest comment

Ashish-Sharma's picture

Hi,

 

Check this

Drive Space used by Virus Definitions Updates

Article:TECH141811  |  Created: 2010-10-13  |  Updated: 2012-06-20  |  Article URL http://www.symantec.com/docs/TECH141811
 

 

Also Check this thread and beppe comments

https://www-secure.symantec.com/connect/forums/sep...

Thanks In Advance

Ashish Sharma

 

 

cus000's picture

From my personal experience, i wouldn't recommend system under 1gb free space... try to get more

You may want to consider the space usage for system paging.... windows updates.... etc

 

Remember by default SEP will keep 3 revisions of definition.... also depending on your configuration, the defs sometimes would require a temp space to be unpacked...

Ashish-Sharma's picture

HI,

Did you received your answer ?

Thanks In Advance

Ashish Sharma

 

 

AjinBabu's picture

Hi Ashish,

Thanks for your concerns.

Since most of our clients are meeting the minimum Hard Disk Space requirement ie 700 MB. Since it is not getting Virus definitions updated, rest all are working fine.

So is there any hope by clearing the Virus definitions and updating it.

 

Best Regards

Ajin

Ajit Jha's picture

Hi Ajin,

In the case of the Symantec Endpoint Protection (SEP) client using large amounts of disk space:

 Stop the Symantec service

  • Symantec Endpoint Protection

    • Click Start, then Run
    • Type: smc -stop
    • Click OK

Deleting the files

NOTE: The following instructions are to be accomplished from the Command Prompt, as attempting to perform the deletions from Windows Explorer may result in delays and application hangs. Please note that these instructions will delete the files in the targeted directories/folders, not the directories/folders themselves. Do not remove the directories/folders themselves.

 NOTE: The following steps will delete files from the system and having a backup of the system in case of problems resulting from the the deletions is advised.

Open the Command Prompt

Deleting files from User Temp folder

  • Click Start, then Run
  • Type: cmd
  • Click OK

1. Type the following command in Command Prompt. (The following command will vary depending on the user name.) Replace "<NAMEOFUSER>" with the username of the desired Windows user you wish to empty the temp folder for:

 

  • For Windows 2000/XP/2003
     DEL /F /Q "C:\Documents and Settings\<NAMEOFUSER>\Local Settings\Temp"
  •  For Windows Vista/7/2008
     DEL /F /Q "C:\Users\<NAMEOFUSER>\AppData\Local\Temp"

2. Deleting the contents of the temp folder at the root of C:\

  • Type the following command in Command Prompt:

    DEL /F /Q C:\temp

3. Deleting the contents of the Windows Temp folder

  • Type the following command in Command Prompt:

    DEL /F /Q C:\WINDOWS\Temp

4. Deleting the contents of the xfer and/or xfer_temp directories

  • Type the following command in Command Prompt:
      • Windows 2000/XP/2003
        DEL /F /Q "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\xfer_tmp\"

        DEL /F /Q "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\xfer\"

      • Windows Vista/7/2008
        DEL /F /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\xfer_tmp\"

        DEL /F /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\xfer\"

 

The Quarantine Folder

NOTE: The following instructions are to be done from the Command Prompt as attempting to open the Quarantine folder in the Windows user interface may result in delays and Windows Explorer application hangs due to the large amount of files that can reside there.

 

Delete the Quarantine Folder

Type the following commands in the Command Prompt:

  • Windows 2000/XP/2003
    DEL /F /S /Q "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\Quarantine"

    RD /S /Q "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\Quarantine"

  • Windows Vista/7/2008
    DEL /F /S /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\Quarantine"

    RD /S /Q "C:\ProgramData\Symantec\Symantec Endpoint Protection\Quarantine"

Recreate the Quarantine Folder

Type the following command in Command Prompt:

  • Windows 2000/XP/2003
    MD "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\Quarantine"
  • Windows Vista/7/2008
    MD "C:\ProgramData\Symantec\Symantec Endpoint Protection\Quarantine"

Start the Symantec service

  • Click Start, then Run
  • Type: smc -start
  • Click OK

Regard's

Ajit Jha

Technical Consultant

ASC & STS