Howdy,

The last two weeks about 1/4 of our clients stopped reporting IPS signatures. Below is a screenshot of the report

Here is what is listed on the SEPM for IPS

Here is what is listed on one of the clients not reporting.

I have tried to manually update the clients, sepm, rebooted server and pcs, stopped and started services and so far no go. Has anyone else experienced this issue or this type of issue? Any tips or suggestions on how to get the clients to report correctly for my reports?

Thanks in advance.

Run the symhelp tool to see what's going on

Troubleshooting computer issues with the Symantec Help support tool

Have you tried running a repair of the client via add/remove programs?

You may want to enable sylink debugging on the client to see the client/server communication

How to enable Sylink debugging for the Symantec Endpoint Protection 11.x and 12.1 client in the Windows Registry

What exact SEPM version are you using ?

#Edit

IPS definitions download to the machine but update does not register in SEPM or SEP 12.1.1000 client

http://www.symantec.com/business/support/index?page=content&id=TECH181546

What is your SEPM version?

How many clients ahve same issue?

Try to clean the one client defintion and check it getting update

How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually

Potential Symantec Endpoint Protection content definition corruption

We are using Sepm 12.1.4013.4013.

We have about 40-50 clients that are having the issue at any given time.

We tried running live update on a few of the machines and they started to report correctly. This morning they are all reporting incorrectly again.

Hi,

I have tha same problem on my sepm 12.1.4023.4080 (12.1.4a).

I have about 10000 clients and 2000 are not reporting IPS defs (not available).

the clients themselves (on the computers)  are green and showing the latest IPS defs.

I've notised the issue after the 03/21/2014 r11 defs of IPS.

things I've tried:

1. go back (via live update policy) to the old defs (03/21/2014 r11), the clients updated and than back to the lastest defs. The clients were good but than got back to not available.

2. Delete clients and wait for them to register back to the manager. The clients were good but than got back to not available.

The clients that are not reporting are XP AND WIN7, and all the sep versions from 12.1.1 to 12.1.4.

hope this information helps, and waiting maybe someone have a solution.

thanks.

hi, since today i have the same problems as mentioned above.

maybe someone has a solution in between ?

thx

kurt

What Exact SEPM version are you using ?

hi, its 12.1.4023.4080