Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SEP client showing Older Virus definition.

Created: 07 Feb 2013 • Updated: 07 Feb 2013 | 11 comments

Dear Team,

 

I am facing one issue with SEP.Our SEP clients are showing the older definiton version .All clients are getting update from SEPM server.

 We are using SEPM server 12.1(12.1.671.4971)

 

SEPM server Version: 02/05/2013 r32

 

SEP Client Version: 01/31/2013 r32

 

 

Comments 11 CommentsJump to latest comment

Ashish-Sharma's picture

 

Can you pass  log.liveupdate logs

 

 

The SEPM does not update virus definitions. Liveupdate not working on the Symantec Endpoint Protection Manager 12.1

Article:TECH183178  |  Created: 2012-03-07  |  Updated: 2012-07-03  |  Article URL http://www.symantec.com/docs/TECH183178
 

https://www-secure.symantec.com/connect/articles/t..

Thanks In Advance

Ashish Sharma

 

 

Rafeeq's picture

check if your sepm is updated.

you can check it under 

admin

servers tab

jijithp's picture

YEs.My SEPM server is uptodate.((Ver:02/07/2013 r4)..But clients showing 01/31/2013 r32..But these clients showing status good(greenMArk)..

 

Thnaks

jijith

 

 

 

Rafeeq's picture

the definition date is from home tab or under servers?

if you click on update policy on one client does that update definitions?

whats the heartbeat interval set for your clients, is the communication in pull mode or push mode?

SebastianZ's picture

Is this the version (SEPM server Version: 02/05/2013 r32) you see on the SEPM GUI under SErvers -> Localsite -> Show Liveupdate downloads?

- are the client in push or pull mode? If pull what is the heartbeat?

 

jijithp's picture

Hi Sebastian,

 

Noe MY SEPM is hsowing 02/07/2013 r4...And Clents are configured in pull mode and frequecy is 30 minutes....

Still our clients showing older versions and these clients having green mark in the status bar.

 

Thanks

 

Ambesh_444's picture

Hi,

Please check if your SEPM server is updated then check connectivity with client to sepm.

And if sepm is not updated then run LUALL from sepm server.

and then 

Login on SEPM ==>Go to on admin==> click on server ==>click on local site ==>click on Download liveupdate content.

Then reboot the server aftre that client will be update automatically.

Makesure your sepm having free disk space available on the hard disk

 

Thank& Regards,

Ambesh

"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

Chetan Savade's picture

Hi,

Repair the SEPM through add/remove programs.

It may happen that SEPM definitions are corrupted and because of this all the clients are not receiving the latest definitions.

Logon to the  SEPM --> Select Admin tab --> click on server --> Select local site --> Select show liveupdate downloads

Check definitions dates are updated or not.

If only few clients are not receving updates then you can follow this article.

How to determine if virus definitions of Symantec Endpoint Protection client (SEP) 11 or 12 Small Business Edition, are corrupted

http://www.symantec.com/docs/TECH97677

 

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Ambesh_444's picture

Hello,

Let me know if any more help require?

 

Thank& Regards,

Ambesh

"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

SebastianZ's picture

If you can try generating the sylink.log on one of the clients - http://www.symantec.com/docs/TECH104758 - let it run for half an hour so that it covers one full heartbeat - this should show why the clients are not getting the newest defs.

Sumit G's picture

How many client you have the same problem?

Are these client are getting update from SEP  Server or these are connected through GUP?

 

Try below on one client

How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually
http://www.symantec.com/docs/HOWTO59193

Regards

Sumit G.