Endpoint Protection

 View Only
  • 1.  SEP 11 Client not updating

    Posted Sep 27, 2010 02:06 PM

    I have one server that is not updating the definitions past the date the client is installed.
    So if I installed the client on the 24th, the latest definitions it will get are the 24th.

    1)  It is a domain controller with no FSMO roles on it
    2)  Virtualized in VMware ESX 3.5
    3)  Windows Server 2003 SP2
    4)  No firewall in the AV client or in the OS


    I have uninstalled the client, and liveupdate and reinstalled.  Same issue.
    I have followed the article to remove the definitions as if they were corrupted and the definitions from that day download... eventually, and it never updates past that point.

    AV logs don't show me any issues and the computers logs don't show me any issues other than a certificate error.  But that error has been pre-existing before I was even hired on.

    (Automatic certificate enrollment for local system failed to enroll for one Domain Controller certificate (0x800706ba).  The RPC server is unavailable.)

     

    Can anyone help please?



  • 2.  RE: SEP 11 Client not updating

    Posted Sep 27, 2010 02:14 PM

    Do you have proxy on this server ? Have you installed Managed or Unmanaged client on this server ?

     



  • 3.  RE: SEP 11 Client not updating

    Posted Sep 27, 2010 03:16 PM

    No proxy and it is a managed client.



  • 4.  RE: SEP 11 Client not updating

    Posted Sep 27, 2010 04:01 PM

    Open IE and type the URL on the 2003 server

    http://[SEPm servername or IP]:8014/secars/secars.dll?hello,secars

    See if you get a OK or some HTTP error code.

    or make sure port 8014 is open in the firewall..



  • 5.  RE: SEP 11 Client not updating

    Posted Sep 27, 2010 04:30 PM

    Gives me a big OK.

    Okay... I moved the server into another container in SEPM and about 10 minutes later it updated.
    I'm going to try removing the "Servers" container and re-create it and move the server back into it.  Hopefully by tomorrow it will have updated.

    I'll keep you posted.  Oh and Vikram, thanks for the help so far!



  • 6.  RE: SEP 11 Client not updating
    Best Answer

    Posted Sep 27, 2010 04:46 PM

    Yeah..In that case it looks like Liveupdate policy is not configured properly for the group Servers.



  • 7.  RE: SEP 11 Client not updating

    Posted Sep 27, 2010 06:26 PM

    Have a look on this, that might help you to have a better understand of LiveUpdate policies

     

     
    Title: 'Symantec Endpoint Protection Manager - LiveUpdate - Policies explained'
    Document ID: TECH104435
    http://www.symantec.com/business/support/index?page=content&id=TECH104435&locale=en_US


  • 8.  RE: SEP 11 Client not updating

    Posted Sep 28, 2010 01:31 PM

    Vikran, you were correct.  For some reason the Liveupdate policies weren't applying to this one particular folder.  Just happened to contain only one server thankfully.

    Odd how it happened, as there was no changes made to it.  Just created it as a container like the other folders.

    Thanks for the assist.