Endpoint Protection

I try to update manually of SEP client using the update files downloaded from Symantec website. After that, the SEP client definition date is normal, but it only for one day. The next day and so on, the SEP client can't auto update from SEPM as normally.

Is there any effect of the update files, or what should I do ?

Please tell me the solutions.

Thanks & Regards...

Did you manually update because the client was already not updating from the SEPM.

Try the Support Tool (open the client and select Help & Support button to download the tool). Select all options (except power eraser). It will produce a report with a traffic light summary - Green status is ok, but you can drill down on the Red areas to isolate individual problems. It will highlight ant communications issues between client and server.

Are you using a GUP or the clients get the definition directly from SEPM? Share us a screenshot of the LU policy

Is this on just one machine or on all the machines?

can you pass on the sylink log from the machine?

Hello,

What version of SEP are you carrying?

Could you please let us know the reason, you upgrading client machines via Intelligent updater?

Secondly, Are these clients reporting to the SEPM properly?

Is the SEPM updated with the Latest definitions?

In your case, please check this Article, which may assist you - 

Symantec Endpoint Protection: LiveUpdate Troubleshooting Flowchart

http://www.symantec.com/docs/TECH95790

Hope that helps!!

Dear NRaj,

I usually use GUP for distribution update of all SEP Client in each group, but there are some of SEP client can't update normally after I've try manual update..

I use SEP 11.0.

I'm upgrading SEP client machines via Intelligent updater, because the SEP client is out of date. I've done try update content via SEPM console, but the SEP client is still out of date, whereas the other client is normal. After that I've try update policy via the SEP client machine, but no response from SEPM. Later I've done check connectivity from client machine to SEPM server, is no problems. But even so the shield icon status is still green. So it seems like there is something that inhibits to update, is it possible that because of virus ?

SEPM have updated with the latest definitions.

Thank's for your suggestion..

the sylink log will help to understand the issue.

Can you repair the SEP client and take a restart

Regards

Hello,

What version of SEP 11.0 are you carrying?

Is this issue is happening only on 1 machine? or few other machines?

What OS is this machine running on?

Did you repair the SEP client?

Could you check the version of Liveupdate in the Add/Remove Programs?

Did you follow this Document : Symantec Endpoint Protection: LiveUpdate Troubleshooting Flowchart

http://www.symantec.com/docs/TECH95790

If nothing is working, please upload the log.liveupdate from the Client machine.

Hope that helps!!

How many machines are we talking about here?

Are all these machines get the definitions from the same GUP & are they in the same group?

This issue is happening on 6 machines.

The OS is Windows XP SP3 32bit.

I have try to repair. I even tried to reinstall SEP, but it's still can't update.

I haven't been checked the version of Liveupdate in the Add/Remove Programs, but I will try latter.

Ok, if it's not working, I will upload the log.liveupdate files soon.

Thank's a lot. 

There are about 6 SEP client machines of all, what have problems like that is.

No. Every machine get the definition from the GUP in each different group. 

Thank's

Try to delete the old definitions manually and update once. You can also try the Rx4defs utility, but that can be obtained only from tech support.

How to clear out corrupted definitions for a Symantec Endpoint Protection Client manually

http://www.symantec.com/business/support/index?page=content&id=TECH103176

Try this on a pc and see if it starts updating automatically & let us know.

Hello,

Is the Issue resolved?

Did you check the Liveupdate Version?

If the issue is not Resolved, please upload the log.liveupdate and we could assist you to check the root couase of the issue.

Hope that helps!!

Hi Barkah,

The clients usually resume updating from SEPM or GUP without too much difficulty after being updated via the Intelligent Updater. 

The one catch is that if the SEPM or GUP do not download every one of the Multiple Daily Definitions that can be downloaded and processed from Symantec, the SEP clients may be checking in with a vesion of defs that the SEPM does not know what to do with.  In that case, it will try to give the client a full set of AV definition (160 MB or so).

If your network is slow or if there are restrictions against downloading such a large file, that would account for delays or failures in receiving the full defs and remaining up-to-date.

The sylink log will tell the full story. 

Hope this helps!!

Just for the Test purpose move those clients to the Test group 

Assign a new liveupdate policy 

Liveupdate source should be SEPM and External liveupdate (Symantec Server)

Dont configure the GUP for the group 

Monitor the status for 8 hours Let me know the updates...

This is to isolate issue...