Video Screencast Help

SEP client showing Older Virus definition.

Created: 07 Feb 2013 • Updated: 07 Feb 2013 | 11 comments

Dear Team,

I am facing one issue with SEP.Our SEP clients are showing the older definiton version .All clients are getting update from SEPM server.

 We are using SEPM server 12.1(12.1.671.4971)

SEPM server Version: 02/05/2013 r32

SEP Client Version: 01/31/2013 r32

Comments 11 CommentsJump to latest comment

Ashish-Sharma's picture

Can you pass  log.liveupdate logs

The SEPM does not update virus definitions. Liveupdate not working on the Symantec Endpoint Protection Manager 12.1

Article:TECH183178  |  Created: 2012-03-07  |  Updated: 2012-07-03  |  Article URL

Thanks In Advance

Ashish Sharma

Rafeeq's picture

check if your sepm is updated.

you can check it under 


servers tab

jijithp's picture

YEs.My SEPM server is uptodate.((Ver:02/07/2013 r4)..But clients showing 01/31/2013 r32..But these clients showing status good(greenMArk)..



Rafeeq's picture

the definition date is from home tab or under servers?

if you click on update policy on one client does that update definitions?

whats the heartbeat interval set for your clients, is the communication in pull mode or push mode?

SebastianZ's picture

Is this the version (SEPM server Version: 02/05/2013 r32) you see on the SEPM GUI under SErvers -> Localsite -> Show Liveupdate downloads?

- are the client in push or pull mode? If pull what is the heartbeat?

jijithp's picture

Hi Sebastian,

Noe MY SEPM is hsowing 02/07/2013 r4...And Clents are configured in pull mode and frequecy is 30 minutes....

Still our clients showing older versions and these clients having green mark in the status bar.


Ambesh_444's picture


Please check if your SEPM server is updated then check connectivity with client to sepm.

And if sepm is not updated then run LUALL from sepm server.

and then 

Login on SEPM ==>Go to on admin==> click on server ==>click on local site ==>click on Download liveupdate content.

Then reboot the server aftre that client will be update automatically.

Makesure your sepm having free disk space available on the hard disk

Thank& Regards,


"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

Chetan Savade's picture


Repair the SEPM through add/remove programs.

It may happen that SEPM definitions are corrupted and because of this all the clients are not receiving the latest definitions.

Logon to the  SEPM --> Select Admin tab --> click on server --> Select local site --> Select show liveupdate downloads

Check definitions dates are updated or not.

If only few clients are not receving updates then you can follow this article.

How to determine if virus definitions of Symantec Endpoint Protection client (SEP) 11 or 12 Small Business Edition, are corrupted

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Ambesh_444's picture


Let me know if any more help require?

Thank& Regards,


"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

SebastianZ's picture

If you can try generating the sylink.log on one of the clients - - let it run for half an hour so that it covers one full heartbeat - this should show why the clients are not getting the newest defs.

Sumit G's picture

How many client you have the same problem?

Are these client are getting update from SEP  Server or these are connected through GUP?

Try below on one client

How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually


Sumit G.