Endpoint Protection

 View Only
  • 1.  SEP Client 12.1.5 LU Updates

    Posted Nov 03, 2014 02:15 AM

    Hi All,

    We recently update our SEPM's to 12.1.5. We have noticed that all our clients running the SEP Client version 12.1.5 are not updating from our internal LU server. However our clients that run version 12.1.4100 are updating fine from the same LU server. 

    I have tried to following on a test workstation none have resolved the problem;

    Remove SEP12 12.1.5 client  and reinstall client

    Confirm conection to SEPM server. SECARS test

    Deleted definitions using the following method http://www.symantec.com/business/support/index?page=content&id=TECH103176

    Does anyone have any tips on what this could be. I think I maybe the LU server version but I currently do nto have access to the server which another team manages.

     

    The below is the LU client log from c:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Lue\Logs\log.lue

    Symantec LiveUpdate Engine 2.3.0.53   (Release)
    OS: Windows 8 Enterprise 64-bit, VerInfo: 6.2, ServicePack: 0.0
    LanguageID: 00000C09
    WinHttp.dll Version: 6.2.9200.16451
    ----------------------------------------------------------------------------------------------------
    Session started at: 2014/11/03 14:56:12.611    (UTC +08:00)
    ProcessId: 2512, ThreadId: 5852, SessionId: 4, Machine ID: B8F3AE32-7C0C-4D39-613C-1C4D7D6F864A, Agent Field: SEP/12.1.5337.5000, MID/{B8F3AE32-7C0C-4D39-613C-1C4D7D6F864A}, SID/4
    ----------------------------------------------------------------------------------------------------
      Component: Moniker: {C1D5327B-2BA6-43FA-AFE7-8E6C8360EE2D}, P: SEPC CIDS Signatures 12.1 RU5, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      Component: Moniker: {51C81AF7-5A45-4BEF-9CA4-38AF3C891F46}, P: SEPC SRTSP Settings, V: 12.1 RU5, L: SymAllLanguages.
      Component: Moniker: {5A7367E1-D1F6-43b5-BD94-4AFFA896D724}, P: SEPC SMR Definitions 12.1 RU5, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      Component: Moniker: {0F3370CC-CB7C-4976-9315-22E436B26137}, P: SEPC Iron Whitelist 12.1 RU5, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      Component: Moniker: {7ADF5254-6017-4769-89B1-9F9CD03FA8C5}, P: SEPC Iron Settings 12.1 RU5, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      Component: Moniker: {07B590B3-9282-482f-BBAA-6D515D385869}, P: SEPC Virus Definitions Win64 (x64) 12.1 RU5, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      Component: Moniker: {74BC74C3-493B-46DA-B3B6-6C9C86F29B89}, P: SEPC Submission Control Data, V: 12.1 RU5, L: SymAllLanguages.
      Component: Moniker: {8020CBD2-0BA5-4FFD-BB3E-57CB42C6513C}, P: SEPC Extended File Attributes and Signatures 12.1 RU5, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      Component: Moniker: {FE0C7385-92CD-4877-B26F-EE9FFB3C34E0}, P: SEPC Iron Revocation List 12.1 RU5, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      Component: Moniker: {FC1DE9A6-0007-4f4a-9CDB-BB89A857F51D}, P: SEPC Virus Definitions Win64 (x64) 12.1 RU5, V: MicroDefsB.Error, L: SymAllLanguages.
      Component: Moniker: {BA569190-E525-4101-A87A-775EF73FDD26}, P: SEPC Behavior And Security Heuristics 12.1 RU5, V: MicroDefsB.CurDefs, L: SymAllLanguages.
      OnNotify() method for callback {E8827B4A-BEEF-4dea-8C93-07B32A63D1C5} returned 0x0
      OnNotify() method for callback {2F090208-20DC-42f0-BBD8-B68B472F7215} returned 0x0
      OnNotify() method for callback {EDBD3BD0-BEEF-4d4d-BAC9-19DD32EF4758} returned 0x0
      OnNotify() method for callback {263395A0-BEEF-4be4-80B5-202C94EF4AA0} returned 0x0
      OnNotify() method for callback {810D5A61-BEEF-49c2-BD75-177F0647D2BA} returned 0x0
      OnNotify() method for callback {B6DC6C8F-BEEF-40c7-A806-B669BE1D2D19} returned 0x0
      OnNotify() method for callback {511C2222-DEFD-22EE-B154-4A6A546B9793} returned 0x0
      OnNotify() method for callback {73D8F7DB-5990-4EDF-945E-53047F1A8230} returned 0x0
      OnNotify() method for callback {57CD7B31-861B-46be-8EBD-AED7EDF28F76} returned 0x0
      OnNotify() method for callback {F845E8D8-25D9-4cbb-A20F-1350B8120133} returned 0x0
      Proxy auto-detect is enabled
      Server selection complete. Server is HTTP://sep12liveupdate.sep.<DomainNamePrivate>/clu-test on port 7070.
      OnNotify() method for callback {E8827B4A-BEEF-4dea-8C93-07B32A63D1C5} returned 0x0
      OnNotify() method for callback {2F090208-20DC-42f0-BBD8-B68B472F7215} returned 0x0
      OnNotify() method for callback {EDBD3BD0-BEEF-4d4d-BAC9-19DD32EF4758} returned 0x0
      OnNotify() method for callback {263395A0-BEEF-4be4-80B5-202C94EF4AA0} returned 0x0
      OnNotify() method for callback {810D5A61-BEEF-49c2-BD75-177F0647D2BA} returned 0x0
      OnNotify() method for callback {B6DC6C8F-BEEF-40c7-A806-B669BE1D2D19} returned 0x0
      OnNotify() method for callback {511C2222-DEFD-22EE-B154-4A6A546B9793} returned 0x0
      OnNotify() method for callback {73D8F7DB-5990-4EDF-945E-53047F1A8230} returned 0x0
      OnNotify() method for callback {57CD7B31-861B-46be-8EBD-AED7EDF28F76} returned 0x0
      OnNotify() method for callback {F845E8D8-25D9-4cbb-A20F-1350B8120133} returned 0x0
      ***** Session Results *****
      Total Updates Available: 0
      Total Updates Succeeded: 0
      Total Updates Succeeded - Reboot Req: 0
      Total Updates Skipped: 0
      Total Updates Failed: 0
      Session result code: 0x00000000
    ----------------------------------------------------------------------------------------------------
    Session ended at: 2014/11/03 14:56:13.424    (UTC +08:00)
    ****************************************************************************************************
     

     



  • 2.  RE: SEP Client 12.1.5 LU Updates

    Posted Nov 03, 2014 02:26 AM

    A little bit more information the LiveUpdate server version is 2.3.2.99



  • 3.  RE: SEP Client 12.1.5 LU Updates

    Posted Nov 03, 2014 02:49 AM

    can you post the complete Liveudpate log please. and also run the symhelp tool and check if that throws up any error

    http://www.symantec.com/business/support/index?page=content&id=TECH170752



  • 4.  RE: SEP Client 12.1.5 LU Updates
    Best Answer

    Posted Nov 03, 2014 03:47 AM

    This does just sound as if the LUA has not yet been updated to download and distribute the SEP12.1RU5 defs.

    Just like with RU2 and RU4 ones before, whoever manages the LUA will need to add the SEP12.1RU5 client defs to the "My Symantec Products" page, assign it to the relevant Distribution Centres (the default inbuilt test DC from the looks of your logs), and add it to the respective Download and Distribution jobs.



  • 5.  RE: SEP Client 12.1.5 LU Updates

    Posted Nov 03, 2014 07:04 PM

    Looks like you could be right SMLatCST. I managed to get access to the LUA server and the SEP12RU5 selected to download and distribute.

    I am just arranging for them to be added.