Hi guys,

One of the clients will not update the definitions. NTP and PTP update correctly. In the sylink log I can see:

07/04 08:49:09 [2668] </CHttpConnector::SendRequest()>
07/04 08:49:09 [2668] <CHttpFileDownload::read()>
07/04 08:49:33 [2668] </CHttpFileDownload::read()>
07/04 08:49:33 [2668] </CHttpFileDownload::Do()>
07/04 08:49:33 [2668] <LUDownloader::GetContentToFile> completed.
07/04 08:49:33 [2668] <CHttpFileDownload::~CHttpFileDownload()>
07/04 08:49:33 [2668] </CHttpFileDownload::~CHttpFileDownload()>
07/04 08:49:33 [2668] <UpdateLUFileList:>Updating existing Download File List with : {C60DC234-65F9-4674-94AE-62158EFCA433}110703003
07/04 08:49:33 [2668] <ProcessLUDownloadedFile>LU Content Downloaded.  Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Target Seq:110703003 Full version:1 Delta Base Seq:
07/04 08:49:33 [2668] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
07/04 08:49:41 [2668] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=19
07/04 08:49:41 [2668] <ProcessLUDownloadedFile>LU download file: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF{C60DC234-65F9-4674-94AE-62158EFCA433}1107030031.TMPunpacking error. Delete status: Failure
07/04 08:49:41 [2668] <ProcessLUDownloadedFile> Applying LU Content failed for  Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Target Seq:110703003 Full Version:1 Delta Base Seq:
07/04 08:49:41 [2668] <ProcessLUDownloadedFile> Starting the wait timer on 'Full version Apply failure' at 08:49:41
07/04 08:49:41 [2668] <UpdateLUFileList:>Updating existing Download File List with : {C60DC234-65F9-4674-94AE-62158EFCA433}110703003
07/04 08:49:41 [2668] <ProcessLUDownloadedFile> Download LU file failed. FileName:  Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq: 110703003
07/04 08:49:41 [2668] <LUThreadProc>LU item not ready - skipping download.
07/04 08:49:41 [2668] SyLinkDeleteConfig => Deleting instance: 04696438
07/04 08:50:11 [4384] <CSyLink::mfn_DownloadNow()>
07/04 08:50:11 [4384] </CSyLink::mfn_DownloadNow()>
07/04 08:50:41 [2668] SyLinkCreateConfig => Created instance: 04696438
07/04 08:50:41 [2668] Importing ConfigObject: 032B55E0 into: 04696438
07/04 08:50:41 [2668] <LUThreadProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 04696438
07/04 08:50:41 [2668] <LUThreadProc>Starting LU download.
07/04 08:50:41 [2668] <LUThreadProc>LU item not ready - skipping download.
07/04 08:50:41 [2668] SyLinkDeleteConfig => Deleting instance: 04696438
07/04 08:51:13 [4384] <CSyLink::mfn_DownloadNow()>
07/04 08:51:13 [4384] </CSyLink::mfn_DownloadNow()>

Installigent Update works fine and manually it is possible to update the defs on the clients. Any ideas?

I've seen issues like this where hard drive space was an issue.  How much free space is on this client's hard drive?

Thanks for the feedback but this is not a case. We've got plenty of space, it did not work from the beggining. This is really strange:

07/04 08:49:41 [2668] <ProcessLUDownloadedFile>LU download file: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF{C60DC234-65F9-4674-94AE-62158EFCA433}1107030031.TMPunpacking error. Delete status: Failure

I believe this is an issue with RU5.  I had similar issues where the client defs would go out of date some 2 weeks before finally updating themselves automatically.  Stopping and starting the SMC service sometimes caused the systme to update as well, but the one thing that always worked was live update.  Does running LU update the definitions?  Obviously that isn't the fix, but I would be curious if that at least updates the defs.

If it is the same issue, I can confirm that it is resolved post RU5.

Did you try delete all the virus defs; clean up the content folder the sequence its referring it  and then update it.

Unfortunately this machine has no access to the Internet. I cannot migrate to RU6 either :/

Hi,

Try running intelligent updater.

http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce

Whats the versions of IE?

You remember we had one issue realted to the IE version?

do you have a GUP in place, if so what is your setting for "Maximum time for clients to update from GUP before trying the default SEPM"?

As stated, IU works fine :-)

same issue

Managed clients no longer receive updates after Internet Explorer 9 install

Sure I do, but it is IE7 and I'm kinda out of ideas now...

no gups, it goes directly from SEPM :)

And there is no issue like:

09/30 11:19:54 [3724] Throw Internet Exception, Error Code=12152;AH failed to read internet file

Hi,

Try to repair SEP client, Confirm that SEPM AV/AS definitions are updated .

I have already reinstalled it - still the same issue.