Endpoint Protection

Friends,

I have noticed that all clients are stuck on a virus definition date that is the same as the day I installed WSUS SP1 on the server that SEPM sits on.

My recently updated/installed clients are stuck at 'Waiting for Updates' on Proactive Threat Protection.

The newest definitions are loaded on the server (I checked the LiveUpdate content files), but are not being spread to the masses (they are all green dotted).

I am assuming this is some sort of IIS problem. Are there some troubleshooting steps?

Thank you for your help in advance!

Aaron

The main two causes of your problem are one a network issue with the client not correctly talking to the management server, and a corrupted install package that was pushed out. So first make completely sure that the client is connecting correctly with the management server. I know there is a green dot which indicates that it is, but to make sure try to ping the management server from the client. Now to test if it was a corrupt package that was pushed out you can uninstall SEP from one client, and then push out a completely new install package from the Endpoint Protection Manager and see if it correctly updates PTP.

Also it would be helpful if you could post what version of SEP you are running.

Cheers
Grant

@Grant_Hall
how couls you tell the issue was caused by corrupted installation package? I saw multiple instance in my deployment, and liveupdate most of time did not fix the issue, and fix button could not resolve the issue.

The way I resolve the issue was to use MSI repiar ( go to control panel, add/remove programs, select SEP 11.0 and click on change. that will make all the components green. but it took me too much time and had to logon locally.

I can not agree that the issue was caused by corrupted installation package as I use the same package on hundreds of machines, and only 3 to 5% of machines experiecned issue like this.

I saw some posts from Symantec supports saying the issue might cause by the corrupted installation. my question is how could we verify the issue was caused by corrupted installation? and how could an installation become corrupted at the very initial install time?

hi

what is the OS? Was this update  working (PTP) earlier?

try repairing the installation.

PTP does not work on 64 bitr and server OS/

cheers
Pete

Here is some further information to frame my issues properly:

• SEP version 10.0.4204.75
• Clients all run Windows XP w/ SP3 32-bit
• All clients can ping the SEPM manager

What website were we installed to?

If you installed both the SEPM and WSUS into the same website (ex. Default) then the last one in will overwrite the "Content" directory. This would then cause updates to fail, but would still make it seem as though the clients can communicate with the SEPM.

Check out this document for more information:

Title: 'Symantec Endpoint Protection clients do not update definitions or signatures with Windows Server Update Services (WSUS) installed on the Symantec Endpoint Protection Manager'
Document ID: 2007110813315548
> Web URL: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007110813315548?Open&seg=ent


Hope that helps!