Endpoint Protection

Hello,

 I can't seem to find steps to recover from a bad or false positive SEP11 definition file (AV, NTP, PTP) in the forums or SEP admin guide, am I missing the obvious?  In SAV10 it was simple to designate which definition file you wanted the primary server to have through the SSC and then push it out to the clients.   Is there a way to revert back to older defs through the GUI?

I was thinking I could use this process
 
service1.symante/service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/6a1ab5f037c03e488825736f0010829b

to manually install the "old" .jdb file on the SEPM but it is NOT the full package (just AV and Anti Spyware) so I would prefer a way to do it that could fully replace all component's defs, in case of emergency.  This would also be helpful for testing WAN optimization performance by downloading the same def file to see resulting speed improvements.

Hi

Check this document.

http://service1.symantec.com/support/ent-security.nsf/docid/2007111515160948

I think that(Your Link) is the only way to revert updates in SEPM.....

If you want to have more control over definition its better to use Liveupdate Administrator...

It has features like locking a distribution center(source of update for SEPM/Clients) to particular version of update.....

You can have a test distribution center which can be used to test definition before deploying it to production environment..

LuAdmin is available in CD2
You can try that Its very usefull.... 

Thanks for the suggestions all, Not sure how I missed that Knowledge base article as I searched on 3 of the very words that are in the title of the link.  Either way I'll check out both options. 

I appreciate it.