Endpoint Protection

I'm getting constant "Out-of-date clients" email notifications from my SEPM server. When I check the clients they are evidently not out of date, but in SEP Manager against the client's Current Virus Definition it says "Not Available". 

I've seen a few posts on the Symantec community boards about using Intelligent Updater to fix the problem, and I can also just reinstall the client software to fix the problem, but it's becoming extremely inconvenient as my customer's clients are difficult to get hold of and it takes me hours to get access and sort the problem out.

I'm using SEPM 12.1.4023.4080 - Is there a way to sort this, or is there a fix to this in the latest release?

I assume clients are also checking in at regular intervals? Have you tried deleting/re-creating the notification?

can you move these clients to a different group and update the policy to see if that comes up with latest info?

I have also been struck with the same problem fred

the thing which I noticed in my case was for some reasons they weren't uploading their logs to the SEPM , though they were connected/reporting to SEPM

Any error message in the system log on the client to indicate an issue uploading logs to the SEPM?

no errors Brian , intrestingly with the inbox directory on SEPM there are no .err files or anything which indicate SEPM failed to process the logs uploaded by the endpoints. Running RU5 for both endpoints and SEPM

Yes the clients are checking in regularly, and I have tried moving the client to another group (and even deleting from SEPM) to no avail.

Seems something may be hung up in the DB. May want to see what support says about it.

Just give it a try

these are the two documents I would suggest

Symantec Endpoint Protection Manager "Virus Definitions Distribution" shows incorrect date for virus definitions inspite of all clients being update-to-date

http://www.symantec.com/business/support/index?page=content&id=TECH123272

Clients cannot send data back to Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH105348

Are the out-of-date clients offline?

See this thread:

https://www-secure.symantec.com/connect/forums/exclude-offline-clients-reporting-old-virus-definitions

Rafeeq - there is 10GB free on the HD, and I have set C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\data\inbox to have full access to everyone but no difference.

greg12 - the clients are online

Might have made some progress with this one..

The group policies (with the troublesom clients) had not been edited for a while... made a trivial change to them, then deleted the clients and since they re-registered again I've not had any email reports, and the SEPM home screen shows 0 clients with out of date AV definitions.

The only thing is that against the client's individual Current Virus Definition it still says "Not Available".

*** EDIT ***

Ignore all that above, the emails have started again *sigh*

Well after wasting hours and hours on this annoying problem (even the Symantec partner support team couldn't resolve it) I upgraded SEPM and clients to 12.1.5 and finally it's stopped.

So fair warning to others experiencing this - there appears to be no solution other than to upgrading everything.

I would like to ask all the experts here including the Symantec Support that what if the customers like me who are facing the similar problem and are already running RU5 , what are they required to do to fix this problem ?

Thanks