Endpoint Protection Small Business Edition

SEP Small Business Edition is not updating the virus definitions on my PCs as often as my servers.  I have a Windows 7 desktop, a Windows XP laptop, a Windows Small Business Server 2003 server and a Windows Server 2008 R2 that is used for training.  I have SEP configured for all computers to download the new content from the Protection Center server.

The servers download the new content every day but the PCs download the content every other day even though the Client Activity log shows that the PCs are connected to Protection Center.  I've just performed the steps in the article on "How to Clear Corruption".  After performing the steps, the Windows 7 PC downloaded the current virus definitions, 1/26/2011 r1, but after about 10 minutes the virus definitions reverted back to 1/24/2011 r35.

Does anyone have the answer on how to resolve this problem.  The problem is that the PCs don't download the current virus definition fle from the Protection Center on a daily basis.

Thanks,

Isom

I'm not sure if this option is available in 12

open spc

admin

clients,

general settings on the right.

communication settings PUsh mode or pull mode?

Just see if the liveupdate schedule is correctly set or not.

SEP Small Business Edition 12.0.1001.95 does not have those settings.  It only has a setting to schedule LiveUpdate and another setting whether the clients are allowed to run LiveUpdate.  If the clients are not allowed to run LiveUpdate, which is how mine is set, the clients are to download the new virus definitions from the Protection Center.

The servers are downloading the new virus definition file but the PCs are downloading the old definitions.  For example today 1/27, the servers virus definitions are dated 1/26/2011 r35 which are the latest from Symantec at 09:00. The PCs virus definitions are dated 1/24/2011 r35.

LiveUpdate is scheduled daily between 04:30 and 05:30.  The servers connect to Protection Center and download the current virus definitions from the Protection Center but the PCs are not.

Was there a previous version of SAV or SEP 11 on these systems? Was anything in your environment changed recently?

Are the servers and  pc's in the same  group?

Also, do you have insatlled  licenses?

Could you post  log.liveupdate  from one  PC and  from  one  server?

Any  update???

SEP 11 was on the Servers and PCs but I uninstalled it from all servers and PCs before installing Symantec Protection Suite Small Business Edition which includes Symantec Endpoint Protection Small Business Edition.

The servers are in the Servers group.  I created a new group, PCs, and moved the PCs from the Laptops and Desktops group to the newly created PCs group.  This has not resolved the problem.  Matter of fact, the PCS have not updated since 1/24/2011 r35.

Where is the log.liveupdate file, I asked  for????

Added the txt extension to file in order to be able to attach it.  I hope you find something.  The PCs virus definitions are still dated 1/24/2011 r35.

Attachment(s)

Log.LiveUpdate_6.txt   3.74 MB 1 version

Please  do the following:

1. On the SPC server, Go to C:/Documents  and settings/All users/Application Data/Symantec/Liveupdate, and  delete the folder.

2. Go to C:/Program files/Symantec/Symantec Protection Center/Inetpub/Content and delete the  contents of  all the  folders . Caution" Do not delete the folders inside the Content  folder, but delete their contents.

3. Go to Add/Remove  programs, uninstall liveupdate

4. Re-install liveupdate, by running lusetup.exe. You can download  lusetup from ftp://ftp.symantec.com/public/english_us_canada/liveupdate/3.3.0/

Once it is installed, go to the  command  prompt, and type:

cd..

cd..

cd program files

cd symantec

cd  Symantec Symantec protection center

cd Bin

lucatalog -cleanup

once done, then type:

lucatalog -update

Once this is completed, run liveupdate  on SPC

I performed the steps you requested. I could not download LiveUpdate from the ftp site so I installed it from the Symantec CD. After LiveUpdate completed, none of the computers were updated with the new virus definitions file. I executed the command "Update Content" on the groups and then all of the computers were updated.

It will be Sunday morning at the earliest before I will know whether the PCs are updated automatically from the Symantec Protection Center. I have LiveUpdate scheduled to execute daily between 04:30 and 05:30.

Any update??

Yesterday, Sunday, Symantec Protection Center had the latest update from Symantec so there was nothing to update.

I checked everything this morning at 06:30 and again at 11:15. Protection Center showed the latest virus definitions from Symantec were dated 1/30/2011 r1 with the same being the latest on Protection Center Manager at 06:30.  However, Server2 virus definitions were dated 1/30/2011 r2, Server3 which is the Protection Center server was dated 1/29/2011 r3, the laptop and desktop PCs were both dated 1/29/2011 r3.  LiveUpdate succeeded at 05:21 this morning.

Everything worked perfectly this morning.  Symantec Protection Center had the latest virus definitions from Symantec which were 1/31/2011 r35 and the servers, laptop and desktop all had virus definitions dated 1/31/2011 r35.  Also Symantec Mail Security for Microsoft Exchange virus definitions were dated 1/31/2011 r35.

Lets see what happens 2/2/2011.

Today, Wednesday 2/2/2011, Protection Center showed the latest virus definitions from Symantec were dated 2/2/2011 r2 with the latest on Manager being 2/1/2011 r37.  Server 2 virus definitions were dated 2/1/2011 r37, Server3, Protection Center server, virus definitions were dated 1/31/2011 r35 along with the laptop and desktop PCs.

I think I will completely remove Symantec Endpoint Protection and re-install it.  Hopefully, the was allow it to update all computers daily.

Resolved issue by completely removing Symantec Endpoint Protection from servers, laptop and desktop PCs and reinstalled on all.