Video Screencast Help
Search Video Help Close Back
to help

SEP Virus Defs still saying out of date

Created: 09 Jan 2013 | 8 comments
mm12345's picture
0 0 Votes
Login to vote

The server was low on disk space so the virus defs would not update.  NetOps made space so now SEP shows the virus defs up to date.  But the message still pops up saying that the virus defs are not updated.

Before, I figured out it was a disk space issue, I tried following the documents to manually update by cleaning the directory and registry thinking maybe the virus defs were corrupted.

Any suggestions. 

Thanks. M.

Comments 8 CommentsJump to latest comment

Brian81's picture

is this coming up on the server or the client? The message should only appear for clients...

0
Login to vote
mm12345's picture

On the client.

I have attached the screenshot

AttachmentSize
VirusDefErr.docx 23.4 KB
0
Login to vote
Brian81's picture

That is on the client.

What does the GUI show? That defs are up to date or actually missing? Is it connecting to the SEPM (green dot showing on icon in task tray?)

0
Login to vote
mm12345's picture

Yup the client and the GUI both show the defs are from 1/9/2013. The client is connecting fine to SEPM (green dot).

I think whatever I did to fix the problem manually before realizing that this was a disk space issue, is causing this in my opinion.

0
Login to vote
Brian81's picture

Try running a repair on the client.

0
Login to vote
mm12345's picture

Thanks Brian, I will give it a try but will have to do it later as this is a productiion system under NetOps control.  So I am not going to mess with it until I get their permission.

0
Login to vote
Ajit Jha's picture

I Hope you are not using SEP 11.0.X. If yes,

This problem has been identified and it has been fixed in RU7 MP1

Computer status log shows virus definitions as "none"
Fix ID: 
2023152
Symptom: When the client starts, SMC sends virus definition date information as "0" to the Symantec Endpoint Protection Manager. The computer status log in Symantec Endpoint Protection Manager shows a virus definition date as "none." The clients have the correct definitions. A workaround is to manually "Update Policy" or wait until the next heartbeat.
Solution: SMC was modified to send the correct virus definition data to the server on startup.

This can cause the machine to generate an alert, however it would be fixed in next heartbeat interval.

 

Also check this

 

Virus definitions out-of-date notification is not accurate
Fix ID: 1998671
Symptom: The Virus definitions out-of-date notification does not correctly reflect the filter condition "include only clients which are currently online." This causes more clients than expected to display.
Solution: The client time stamp in the database was updated when a client is offline. In addition, replication of this state has been improved between servers.
 

Regard's

Ajit Jha

Technical Consultant

ASC & STS

0
Login to vote