Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Proactive Threat Protection definitions in SEP 12.1 ...stale?

Created: 21 Jul 2011 • Updated: 21 Jul 2011 | 7 comments
Vova_NetWiz's picture
This issue has been solved. See solution.

After upgrading an un-managed SEP client (from v.11 to v.12.1) I noticed that the Proactive Threat Definitions rolled back to "Friday, July 01, 2011 r3" and have not changed. Prior to the upgrade, which was done a week ago, they were more recently dated. Running Live Update manually does NOT make any changes to the Proactive Threat Protection definitions. This is exhibited on a number of systems with Win-XP-Pro-SP3 and Win-Vista-SP2.

Furthermore, I just powered up a Win-XP-Pro-SP3 notebook running an un-managed SEP-11 client (v.11.0.6300.803). This system has not been turned on since 29-Jun-11. Ran Live Update on it and it updated all definitions. The Proactive Threat Protection definitions on this system are now dated "Thursday, July 21, 2001 r6".

Can anyone point me in the right direction to understand and rectify this dilemma? Thanks.

Comments 7 CommentsJump to latest comment

dpeters11's picture

Endpoint 11 and 12 have different definitions, that is the correct date for 12.1.

shiznet's picture

I posted the same question a few days ago and got the reply below from a Trusted source:

"That is the correct date for SEP 12 clients.

SEP 11 uses a different engine and different content so the dates will be different."

P_K_'s picture

https://www-secure.symantec.com/connect/forums/sep-121-proactive-threat-protection

https://www-secure.symantec.com/connect/forums/sep-121-sonar-definition-date

Paul Murgatroyd

Symantec Employee
 

Yes, thats correct. They are

Yes, thats correct.

They are different because they are different engines using different content :-)

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

SOLUTION
Vova_NetWiz's picture

Thanks to all for your expeditious replies.

Paul... Is there a webpage showing current defs versions that is reguralry updated and can be used for cross-referencing?

Paul Murgatroyd's picture

that webpage is being rebuilt at the moment, it will be easier to use once done.

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

Vova_NetWiz's picture

Is this the page you arerefirng to?: http://www.symantec.com/business/security_response/definitions.jsp

If not, could you please post a link to the page once the rebuilt is complete. Thank you, Paul.