Endpoint Protection

 View Only
Expand all | Collapse all

SEP 11.x - PTP - Waiting for Updates

ℬrίαη

ℬrίαηSep 14, 2011 03:24 PM

Migration User

Migration UserSep 22, 2011 11:58 PM

ℬrίαη

ℬrίαηSep 30, 2011 05:00 PM

Migration User

Migration UserOct 01, 2011 04:57 AM

ℬrίαη

ℬrίαηOct 01, 2011 04:52 PM

  • 1.  SEP 11.x - PTP - Waiting for Updates

    Posted Sep 14, 2011 02:50 PM

    SCCM fresh install of SEP 11.x (11.0.6005.xxx)

    PTP is stuck on Waiting for Updates.

    I leave it all day and it never updates.

    Repair doesn't fix it.

    If I remove/re-install the PTP component, it will finally update.

    Any ideas on how to fix?

    Thanks,

    Brian



  • 2.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Sep 14, 2011 02:59 PM

    where is it taking PTP updates frm Manger or LU or Self?



  • 3.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Sep 14, 2011 03:01 PM

    does it shows disabled or turned of

    (OR)

    it shows older date



  • 4.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Sep 14, 2011 03:02 PM

    Should be coming from the manager when on internal network. But I ran LU any way. Said updates were downloaded successfully but they never updated. Just sat at Waiting for Updates.



  • 5.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Sep 14, 2011 03:24 PM

    Shows OFF and Waiting for Updates



  • 6.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Sep 14, 2011 03:37 PM

    A Symantec Endpoint Protection client displays an old date for Proactive Threat Protection definitions
    http://www.symantec.com/docs/TECH104115

    Proactive Threat Protection (PTP) definitions are current, but its status remains OFF on systems running Windows Server 200x, Windows 7 or a 64-bit version of Windows XP
    http://www.symantec.com/docs/TECH97928

    Proactive Threat Protection shows disabled and does not update definitions after install
    http://www.symantec.com/docs/TECH93621



  • 7.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Sep 14, 2011 08:37 PM

    Try this:-

    From another computer with the same Operating System and with the same features instaled on SEP,

    Go to C:\documents and settings\all users\application data\Symantec

    Copy the folder named SyknApps and replace it in the computer with the issue.

    then run a repair.

    Run live update.

    Wait for 24 hours. See if it works or not.



  • 8.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Sep 15, 2011 03:28 PM

    PTP off:
    ========


    * Deleted the key HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\
      Storages\SymHeurProcessProtection

     

    For 64-bit machine:
    ===================


    * Deleted the key HKEY_LOCAL_MACHINE\SOFTWAREWOW6432Node\Symantec\Symantec Endpoint Protection\AV\
      Storages\SymHeurProcessProtection



  • 9.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Sep 22, 2011 01:26 PM

    I'm having the same problem on one (that I currently know about) of close to 400 systems with SEP 11.x I support. This one in particular has build 7000. I've already done a removal of SEP, including deleting the application data folder and registry keys, rebooting, re-installation, and everything looks good except PTP just sits there with "Waiting for updates".  A live update run doesn't help.  I even tried today's intelligent updater and that doesn't help.

    The contents of the SyKnAppS app data folder looks normal, the same as any other client today:

    [GuardHeader]
    Legal=Copyright 2000-2001 by Symantec Corporation, All Rights Reserved.
    LastModifiedUtcSeconds=1316600689
    LastModifiedGmtFormated=20110921 10:24:49
    [File-CAL.wlt]
    SHA1=8b7b93a625ea967d56ef5fd3b6065910c566dab3

    [GuardHeader]
    Legal=Copyright 2000-2001 by Symantec Corporation, All Rights Reserved.
    LastModifiedUtcSeconds=1316602749
    LastModifiedGmtFormated=20110921 10:59:09
    [File-COHCOL.wlt]
    SHA1=03fada91e8806acb7426f24bb400d1df6cd0ca18

     

    The only log event for PTP since the re-installation of SEP is:
    TruScan has generated an error: code 11: description: Whitelist Failure

    That event was also what was in the logs every day going back the past several days, before I re-installed SEP 11.0.7000.975 today.

    Under the HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\Storages\SymHeurProcessProtection\RealTimeScan
    registry key, the only extra value when I compare to my own system is Error with a decimal value of 74 which corresponds to the "code 11" error in the PTP log (LOAD_ERROR_SYKNAPPS).

    I see no reason to expect another SEP removal and re-installation will give me any other results.

    Reading another tech article, I also looked in the Log.LiveUpdate text file and I don't see any errors.  Is there some "ah ha" entry I should be looking for that is not an obvious pointer to a problem?

     

     

     



  • 10.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Sep 22, 2011 01:48 PM

    go to add/remove programs

    remove PTP

    reboot

    install PTP

    update it



  • 11.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Sep 22, 2011 08:49 PM

    Ok... I also had to reboot at the end a second time, before it would finally show it had the PTP definitions.

    I hate this, because it is not at all scalable and I've never had to do this before, going back to the first SEP 11.x builds we deployed in the summer of 2008.



  • 12.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Sep 22, 2011 11:58 PM
      |   view attached

    kindly follow this doc...



  • 13.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Sep 30, 2011 12:40 PM

    Hi,

      Has your issue been resolved???

    If resolved then pls share that what the solution is working here.

    Regard

    Sumit



  • 14.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Sep 30, 2011 05:00 PM

    Nope, no resolution.



  • 15.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Oct 01, 2011 04:57 AM

    Have you tried the attach document..??



  • 16.  RE: SEP 11.x - PTP - Waiting for Updates

    Posted Oct 01, 2011 04:52 PM

    yea, no change