Problem:
Suddenly SEP clients stop reporting their status in a proper way (i.e. virus definition, Firewall/Auto-protect status are incorrect whereas Last Check-in value is properly updated).
Error:
No error in any logs
Environment:
SEP 11.0.6 RU6 MP3 installed on Windows XP SP2/SP3.
Cause:
There is a GPO applied to these clients which is monitoring "Symantec Antivirus" service (rtvscan.exe). The latter is then not able to report correct information to the main SEP process (smc.exe) which is in charge of status reporting.
Solution:
Remove impacting GPO then restart client machines.
Reference: http://www.symantec.com/docs/TECH162477
Thanks for sharing the knowledge
Special thank's, you saved my hollydays with this post !
Regards