Proactive Threat Protection definitions in SEP 12.1 ...stale?
After upgrading an un-managed SEP client (from v.11 to v.12.1) I noticed that the Proactive Threat Definitions rolled back to "Friday, July 01, 2011 r3" and have not changed. Prior to the upgrade, which was done a week ago, they were more recently dated. Running Live Update manually does NOT make any changes to the Proactive Threat Protection definitions. This is exhibited on a number of systems with Win-XP-Pro-SP3 and Win-Vista-SP2.
Furthermore, I just powered up a Win-XP-Pro-SP3 notebook running an un-managed SEP-11 client (v.11.0.6300.803). This system has not been turned on since 29-Jun-11. Ran Live Update on it and it updated all definitions. The Proactive Threat Protection definitions on this system are now dated "Thursday, July 21, 2001 r6".
Can anyone point me in the right direction to understand and rectify this dilemma? Thanks.
Comments 7 Comments • Jump to latest comment
Endpoint 11 and 12 have different definitions, that is the correct date for 12.1.
I posted the same question a few days ago and got the reply below from a Trusted source:
"That is the correct date for SEP 12 clients.
SEP 11 uses a different engine and different content so the dates will be different."
https://www-secure.symantec.com/connect/forums/sep-121-proactive-threat-protection
https://www-secure.symantec.com/connect/forums/sep-121-sonar-definition-date
Paul Murgatroyd
Yes, thats correct. They are
Yes, thats correct.
They are different because they are different engines using different content :-)
Prachand MCSE-2012 Symantec Technical Specialist (SCTS)
Thanks to all for your expeditious replies.
Paul... Is there a webpage showing current defs versions that is reguralry updated and can be used for cross-referencing?
...try here:
http://www.symantec.com/business/security_response/definitions.jsp
Regards
that webpage is being rebuilt at the moment, it will be easier to use once done.
Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint
Is this the page you arerefirng to?: http://www.symantec.com/business/security_response/definitions.jsp
If not, could you please post a link to the page once the rebuilt is complete. Thank you, Paul.
Would you like to reply?
Login or Register to post your comment.