Endpoint Protection

We implemented SEP 11.0 MP2 on most of PCs and servers as managed clients. I created a test group with mor feature AV/AS + Proactive truscan Protection (PTP) but PTP part won't get update even with live content update select all updates.

Is this one of malfuntion feature of symantec endpoint? Does anyone know any solution? Symantec support recommended to uninstall and reinstall PTP which is not a good option.

Any input will be appreciated.


Thanks!

Firstly -I would recommend installing the Latest version of SEP 11.0.5002.xx ( MR5/RU5) which is released recently.Earlier version had few issues with PTP that has been fixed in MR5.

Also make sure your SEPM has PTP definitions and the client is communicating with SEP--on the client go to help and support--troubleshooting--and check if it is offline or is showing server name. 

Hello,

Please Upgrade the SEPM to 11.0.5001

Migrating to Symantec Endpoint Protection 11.0 RU5

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/fb9ee7eec2adf4508825762600724ee3?OpenDocument

First the communication has no problem, I can see PTP download on the server.
Does it mean PTP not funtionas supposed to be in 11.0 MR4 MP2?
We also have some other issues ---the clients periodically go to the internet to do live update but in a small package. We worked with symantec support but no right answer. they only confirmed SEPM configured correctly for the clients downloads from the server.

We cannot stop symantec managed client not going out to the internet download. We have internet access limitation.

Hi,

You may be able to download the definitions of PTP at the SEPM. However the communication we are talking about is between the SEP clients and SEPM. In the latest versions, PTP will download definitions from SEPM no matter what OS. But on Server OS, PTP will be off.
If you want to configure the clients to get the definitions only from the manager, you can setup a policy like this:



Also, make sure that the clients receive this policy by making sure that the registry values are as follows:

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\LiveUpdate\UseLiveUpdateServer = 0 [ Take defs from internet ]
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\LiveUpdate\UseManagementServer = 1 [ Take defs from SEPM ]
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\LiveUpdate\UseMasterClient = 0 [ Take defs from GUP ]

Best,
Aniket

As Aniket mentioned PTP is not supported in Server OS... If clients are not taking updates, check the client logs... Check is there any update failure....
 
  Do you have any other Symantec product in the clients which connects to symantec liveupdate site...
  Check those clients when they connect to INTERNET.. check which application is starting LUALL.exe 

Hi are you using a proxy?

Hi all!
hope this would help.
i was having the same problem - after reinstalling the client i still have PTP waiting for update.
I then create a group with live update run allow policy for client  - run manually the client liveupdate  - my green dot cames after that .
has test it on two others clients - it works.

Hi All
I have this issue and it has only started occuring after RU5 upgrade
there are many suggested work arounds but first have a look at this article
 

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008013109171848

We have tried removing PTP through Add remove programs and then adding it back but the client still wont update

Strange thing is that is only clients installed within the last 3 weeks and other PCs connecting to the SEPM are updating fine.

It appears to be something in the SEPM that has changed since the RU5. I have a call  logged with support and they are working through the issue but still no definitive fix as yet
will let you know if I get it resolved.