Endpoint Protection

my sep clients are getting updates from sepm server.
but some of the clients are not updating their Ntp after few days but they are updating their Av&AS and PTP but not NTp. why this happens.

The cleint that you are referring to what is the date for NTP on them ??

Also what  is the date for NTP in SEPM ?

I think client is showing october 2007 ntp date while sepm is uptodate.
this is happening to 10-15 clients only out of 800

Try to run a repair on the machine and then run Luall.exe

I removed sep client from the machine and deleted the folders of symantec and reinstalled again but when the client got updates from sepm server av&as and ptp got updated but ntp remained as it is while installation.

Hi Bijay.Swain,

We would probably want to enable logging called Sylink to see the communication between the client and the manager. If all of your other clients are updating I would assume that your manager is updating as well. Just to be sure though, please check the following:

-Open SEPM
-Click ADMIN on the left
-Click Servers in the lower left
-Select Local Site (Sitename) at the top left
-Click Show LiveUpdate Downloads beside the Admin button
-What is in the middle column for Intrusion Preventian Signatures?

If these are up to date I would suggest giving us a call so we can enable to logging and review them for you.

Bijay,

I would also suggest you go through the following documents:

Troubleshooting Content Delivery to the Symantec Endpoint Protection client
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008092511045348

LiveUpdate and content troubleshooting for the Symantec Endpoint Protection Manager
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008091613592648

 

Are they on thesame group? What is the current version for this set of SEP clients that don't get the update? Try to manually delete bad def on those clients.

Here is the KB to delete virus def.
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007123111551948

yes they are in the same group

check the sylink.log to see why the content is having issue to get from SEPM !! you may need to copy the file here ..somebody will help you on the analysis