Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SEP Virus Defs still saying out of date

Created: 09 Jan 2013 | 8 comments

The server was low on disk space so the virus defs would not update.  NetOps made space so now SEP shows the virus defs up to date.  But the message still pops up saying that the virus defs are not updated.

Before, I figured out it was a disk space issue, I tried following the documents to manually update by cleaning the directory and registry thinking maybe the virus defs were corrupted.

Any suggestions. 

Thanks. M.

Comments 8 CommentsJump to latest comment

.Brian's picture

is this coming up on the server or the client? The message should only appear for clients...

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

mm12345's picture

On the client.

I have attached the screenshot

AttachmentSize
VirusDefErr.docx 23.4 KB
.Brian's picture

That is on the client.

What does the GUI show? That defs are up to date or actually missing? Is it connecting to the SEPM (green dot showing on icon in task tray?)

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

mm12345's picture

Yup the client and the GUI both show the defs are from 1/9/2013. The client is connecting fine to SEPM (green dot).

I think whatever I did to fix the problem manually before realizing that this was a disk space issue, is causing this in my opinion.

.Brian's picture

Try running a repair on the client.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

mm12345's picture

Thanks Brian, I will give it a try but will have to do it later as this is a productiion system under NetOps control.  So I am not going to mess with it until I get their permission.

Ajit Jha's picture

I Hope you are not using SEP 11.0.X. If yes,

This problem has been identified and it has been fixed in RU7 MP1

Computer status log shows virus definitions as "none"
Fix ID: 
2023152
Symptom: When the client starts, SMC sends virus definition date information as "0" to the Symantec Endpoint Protection Manager. The computer status log in Symantec Endpoint Protection Manager shows a virus definition date as "none." The clients have the correct definitions. A workaround is to manually "Update Policy" or wait until the next heartbeat.
Solution: SMC was modified to send the correct virus definition data to the server on startup.

This can cause the machine to generate an alert, however it would be fixed in next heartbeat interval.

 

Also check this

 

Virus definitions out-of-date notification is not accurate
Fix ID: 1998671
Symptom: The Virus definitions out-of-date notification does not correctly reflect the filter condition "include only clients which are currently online." This causes more clients than expected to display.
Solution: The client time stamp in the database was updated when a client is offline. In addition, replication of this state has been improved between servers.
 

Regard's

Ajit Jha

Technical Consultant

ASC & STS