Hello,

Every three to four weeks, updating my server and desktop clients will not work. Symantec support response is “If the serial numbers match then it is updated” or “Use Clean Wipe” there has to be another solution.  I have a small one server two desktop environment:

Server:
Dell PowerEdge T420, Server 2008 R2 RAID-5 with Symantec SEP Manager 12.1.4104.4130

Desktops:
Dell Precision T3610 and Precision T1700, with Symantec SEP 12.1 client

Download from http://www.symantec.com/security_response/definitions/download/detail.jsp?gid=sep
Download JDB at bottom of page
File downloads and saves at .ZIP
Rename *.zip *.jdb
Copy to server C:\Program Files(x86), Symantec, Symantec Endpoint Protection Manager, Data, Inbox, Content, Incoming

After definition download *.zip to *.jdb
Symantec Endpoint Protection Manager
Clients
Under Default Group, Clients tab
Under Task, Add a Client
New Package Deployment
Install Feature Sets: Virus and Spyware Only
Install Settings: Virus and Spyware Only
Content Options: All Content (Recommended)
Remote Push
Browse Network
Add Desktops and Server
Will ask for authentication

From the server manager, clients default view has Virus Definitions as current, but opening Symantec from server and desktop has last version after an hour or so,

Rebooting Server and desktops and re-running push helps, but there has to be an better way, some sort of Cache to clear of something, any ideas?

Any ideas why this gets hung up?

If this is in the wrong forum, please move

Thanks

B.

"Client to Manager communication are not working", weird, Green status except for (winsock) error

"Disable the Windows AutoRun feature", not sure why that would matter

"One or more SEP definitions sets are corrupted" - weird, these are only 4 months old / installed.

- Submission Control Data Definitions

- Iron Revocation Definitions

- Iron Settings

- Iron White List

- Exteneded File Attributes

- SRT SP Settings Definitions

Oh, these are solid state drives, might need to make changes for that

Here

How to enable Sylink debugging for the Symantec Endpoint Protection 11.x and 12.1 client in the Windows Registry

How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually

I have a small one server two desktop environment:

Probably not what you want to hear, but...

The SEP Small Business Edition 12.1.x is overkill for your environment.  I know Symantec says that you can run it in a small business environment, but you've seen the result.

Look into the SEP Small Business Edition that is cloud based.  It even offers an option to designate the server as a local base for updates, but not have the overhead of maintaining the SEPM.

I just transformed a one-server, seven-desktop environment from 12.1.4 to SEP.cloud.  The performance on the server has improved significantly, the files backed up to the cloud (separate BDR) are smaller, and the desktops are updated via the cloud independently of the server.  The only issue I've encountered is a network lag on mapped drives when the desktops first start up (under research).

Hope that helps.

For 1 server and 2 desktops you dont need a Symantec endpoint protection manager

Install all three of them as self managed ( No Manager only clients), will save space, cpu, and management time

Installing an unmanaged Symantec Endpoint Protection 12.x client

http://www.symantec.com/business/support/index?page=content&id=TECH104386

Thank you

This is a request from our customer, and not on the internet, so I address the issue, I do thank you for your input :-)

B.

Check this article to clear cache from the client machine as well as from sepm:

http://www.symantec.com/docs/TECH106450