Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

SEP 12.1.4 Mac Client not getting IPS udates

  • 1.  SEP 12.1.4 Mac Client not getting IPS udates

    Posted Dec 06, 2013 10:25 AM
    I recently upgraded to SEP 12.1.4 and am having a little issue getting IPS updates for Macs.  The SEPMs were installed mid-November and after initial configuration and testing, the properly exported Mac clients were installed on 12/2/13.
     
    We only have about 20 Macs out of 950ish total endpoints so a LU Administrator server isn't really called for.  Our endpoints can only get to the Internet through authenticated proxy so doing passive LiveUpdates from the Mac directly to the Symantec web site doesn't work.  So, I set up an Apache reverse proxy configuration on the SEPMs for the Macs.  The Reverse Proxy setup seems to work pretty good for AV updates but it doesn't appear to work at all for IPS updates. 
     
    On the SEPM home page the "Out of Date" row in Endpoint Status" shows only the Macs, and only the IP Signature column is shown as "out of date".  I visited the "Virus Definition and Security Updates" web page and there is no mention of IPS Signatures for SEP 12.x for Mac-just the traditional antivirus.
     
    This all leads me to believe one or more of the following: 1. Symantec doesn't know that SEP 12.1.4 for Mac now has IPS and therefore doesn't feel the need to supply updates for it, or  2. the Apache Reverse proxy doesn't download IPS Signatures for Mac and that special feature isn't documented anywhere, or  3. There are no IPS Updates for Mac since 11/27/13 and nobody told the SEPM that that the signature isn't really out of date.
     
    I'd love to make this problem go away so I can get my upline out of my face. 
     
    Does anybody have any insight?
     


  • 2.  RE: SEP 12.1.4 Mac Client not getting IPS udates

    Posted Dec 06, 2013 10:28 AM

    Yea was looking at signature page as well but couldn't find any reference for IPS def date for the Macs.

    Has it always been at that date or did this just start?



  • 3.  RE: SEP 12.1.4 Mac Client not getting IPS udates

    Posted Dec 06, 2013 10:45 AM

    Brian,

    It's been November 27, 2013 since I installed them last Monday.  (Is 11/27 IPS Groundhog Day?)



  • 4.  RE: SEP 12.1.4 Mac Client not getting IPS udates

    Posted Dec 09, 2013 12:40 PM

    Well, it's been a week since the Macs were installed and they still don't display that they have received an IPS update.

    IPS.jpg

     

     

     

     



  • 5.  RE: SEP 12.1.4 Mac Client not getting IPS udates

    Posted Dec 09, 2013 12:44 PM

    My suggestion is to get support involved so they can troubleshoot further:

    How to create a new case in MySymantec

    http://www.symantec.com/docs/TECH58873

    Phone numbers to contact Tech Support:

    Regional Support Telephone Numbers:

        United States: https://support.broadcom.com (407-357-7600 from outside the United States)
        Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
        United Kingdom: +44 (0) 870 606 6000

    Additional contact numbers: http://www.symantec.com/support/contact_techsupp_static.jsp



  • 6.  RE: SEP 12.1.4 Mac Client not getting IPS udates

    Posted Dec 10, 2013 10:53 AM

    yeah, I'm beginning to think that's what I'll have to do.  Support and I are on a first name basis.  I have no problem opening a ticket. 



  • 7.  RE: SEP 12.1.4 Mac Client not getting IPS udates

    Posted Dec 10, 2013 10:59 AM

    Good deal.

    Being that IPS for Mac just started in 12.1.4, I wasn't able to find much in the public KB..maybe you're the first one to have this issue cheeky



  • 8.  RE: SEP 12.1.4 Mac Client not getting IPS udates

    Posted Dec 10, 2013 11:03 AM

    As an FYI, November 27, 2013 is the correct date for SEP Mac 12.1.4 IPS signatures!

    MJD



  • 9.  RE: SEP 12.1.4 Mac Client not getting IPS udates

    Posted Dec 10, 2013 11:39 AM

    MichaelD,

    It is?  Wow.  Okay then,  Apparently SEP doesn't recognize that.  It thinks that the IP sigs haven't been updated and they're out of date.

    Thanks Michael.



  • 10.  RE: SEP 12.1.4 Mac Client not getting IPS udates

    Posted Jan 16, 2014 04:41 AM

    IPS def updates are released approximately once in 2 weeks (on an average). FYI, the current IPS defs date (as of 16th Jan) should be Jan 7th 2014.



  • 11.  RE: SEP 12.1.4 Mac Client not getting IPS udates

    Posted Jan 16, 2014 08:38 AM

    Is there a link for this for the Mac?



  • 12.  RE: SEP 12.1.4 Mac Client not getting IPS udates

    Posted Jan 16, 2014 09:55 AM

    Thanks Anand. 

    I've simply accepted the fact that the Mac objects in SEPM will perpeptually report that these systems are out of date when in fact they are not.  It's apparently a bug in the software that probably won't be fixed.

    CropperCapture[10].jpg