Endpoint Protection

 View Only
Expand all | Collapse all

SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

Migration User

Migration UserOct 23, 2013 01:12 AM

Migration User

Migration UserOct 23, 2013 03:09 AM

Migration User

Migration UserOct 23, 2013 08:06 AM

Migration User

Migration UserOct 28, 2013 01:57 AM

  • 1.  SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 23, 2013 12:15 AM

     

    Hi Guys,

    Having a problem in SEPM, it's not updating the virus definition since Oct. 12, 2013. I already try to re-install LU, clear virus defs and update using .jdb. It seems that the sepm not able to install properly. The location D:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{1CD85198-26C6-4bac-8C72-5D34B025DE35} and D:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{C60DC234-65F9-4674-94AE-62158EFCA433} will download the latest AV defs which is 131022001 but it will suddenly remove itself after trying to decompress the .zip file several times. Then when I check the Program Files\Common Files\Symantec Shared\SymcData\sesmvirdef32\ the AV definition is correct. Do anyone of you encountered this error? The memory and the hard disk still have a lot of space. Please do not make a recommendation to upgrade the server.

    OS Version: Windows Server 2003 Enterprise Edition 2003 SP2

    SQL: MS SQL 2005 SP4

     

     

    Regards,

    N



  • 2.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 23, 2013 12:22 AM

    post the logliveupdate

    Symantec Endpoint Protection Manager 11.x is not updating 32 or 64 bit virus definitions.

     

    Article:TECH104721 | Created: 2008-01-15 | Updated: 2013-05-17 | Article URL http://www.symantec.com/docs/TECH104721

     



  • 3.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 23, 2013 01:08 AM

     

     

    Thanks for the response but I already did this article, same result, it removes the folder after trying to decompress it several times.



  • 4.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 23, 2013 01:12 AM

    please provide logliveupdate log.



  • 5.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 23, 2013 01:26 AM
      |   view attached

     Ok, here is the logs and errors in event viewer every time i update.

    Attachment(s)

    zip
    sepmlogsandscreenshots.zip   715 KB 1 version


  • 6.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 23, 2013 01:45 AM

    in: com.sygate.scm.server.consolemanager.requesthandler.ConfigServerHandler
    com.sygate.scm.server.metadata.MetadataException: I/O Error: Connection reset by peer: socket write error

    SEPM is experiencing problems to update virus definitions using MSSQL database.

     

    Article:TECH169209 | Created: 2011-09-09 | Updated: 2012-12-07 | Article URL http://www.symantec.com/docs/TECH169209

     



  • 7.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 23, 2013 02:02 AM
      |   view attached

     

     

    Hi James,

    Already did that. See attached for SQL memory and server perfomance.



  • 8.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 23, 2013 02:06 AM

    I have found one of articles

    Unexpected server error. in: com.sygate.scm.server.consolemanager.requesthandler.ConfigServerHandler
    com.sygate.scm.server.metadata.MetadataException: I/O Error: Connection reset by peer: socket write error

    LiveUpdate succeeds in downloading updated content, but cannot install it on the SEPM

    http://www.symantec.com/business/support/index?page=content&pmv=print&impressions=&viewlocale=&id=TECH179098



  • 9.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 23, 2013 02:16 AM
      |   view attached

     

    Hi James,

    MS SQL is correct (MS SQL 2005) but the version is not. We are using SEP 11.0.6200.754 and the total memory is 36GB so it think its not memory problem. Please see attached for server information/properties.

    Attachment(s)

    zip
    Server Properties.zip   9 KB 1 version


  • 10.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 23, 2013 02:19 AM

    Ok try to this if help

    To adjust the Symantec Endpoint Protection Manager heap size:

      1. Click Start> Run.
      2. In the Run dialog box, type regedit
      3. Press Enter.
      4. Locate the following registry key:
        HKLM\SYSTEM\CurrentControlSet\Services\semsrv\Parameters\
      5. Locate the following keys:
        JVM Option Number 0
        JVM Option Number 1
      6. Adjust the key values upward, and for optimal performance, match the key values.
        For example, to create a 1 GB static heap, set: "JVM Option Number 0" to "-Xms512m", and set "JVM Option Number 1" to "-Xmx1024m".
      7. Close Regedit.
      8. Click Start> Settings> Control Panel> Administrative Tools
      9. In the Services dialog box, right-click Symantec Endpoint Protection Manager, and then click Restart.


  • 11.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013
    Best Answer

    Posted Oct 23, 2013 02:29 AM

    Hi

    Please follow the link below

    http://www.symantec.com/business/support/index?page=content&id=TECH211503

    Regards

     



  • 12.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 23, 2013 03:09 AM

    Hi Sameer,

    You the best smiley



  • 13.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 23, 2013 08:06 AM

    Hi

    Thanks for the post

    Regards

     



  • 14.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 23, 2013 10:40 PM

     

    Hi Sameer,

    One more thing, do I need to revert back to the orignal server.xml file after the successful update?



  • 15.  RE: SEPM 11.0.6200.754 AV stocked at Oct. 12 2013 and Oct. 10 2013

    Posted Oct 28, 2013 01:57 AM

    Hi

    No its not necessary

    Regards