Endpoint Protection

My SEPM definitions are not updating and are stuck on 6/20/2012.  After trying to manually update, the logs say there was nothing available to update.  I had to change the client policy to use Liveupdate server instead of the default management server to update the clients.  Any experts have ideas for me?  Thanks

How much space do you have free on C:?

Do you have multiple SEPMs configured for load balancing/failover?

Hello,

In your case, SEPM is not updating the definitions. 

Check these Articles:

The SEPM does not update virus definitions. Liveupdate not working on the Symantec Endpoint Protection Manager 12.1

http://www.symantec.com/docs/TECH183178

Symantec Endpoint Protection Manager (SEPM) 12.1 is not updating 32 or 64 bit virus definitions.

http://www.symantec.com/docs/TECH166923

Could you also try manually updating the SEPM by downloading the .jdb file on the SEPM version 12.1 and check if that helps:

You can Download the .jdb file from the Link below:

http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce

and follow the document provided below:

Update definitions for Symantec Endpoint Protection Manager using a JDB file

Hope that helps!!

2.51gb on C:  this has been the amount for a while and it has been working.  We will be upgrade the server soon.

We just have one SEPM.

Check the link from Mithun on updating using the JDB file just to see if you can get it to update and let's see what happens.

I've had issues in the past with the SEPM not updating de to low space on C:

2.51GB is getting close but as you mentioned it's been like that for a little while and still working.

Try the JDB file update and let's see what happens.

I have tried these with no success.  I have now noticed other issues - if I try to make any Liveupdate policy changes SEPM hangs and I have to do an end task from task manager (this happens on a workstation and on the server).  The last successful policy change was 6/21/12.  The lastest difinition update on SEPM was 6/20/12.  Any ideas or should I just try updating to the latest version of SEPM to see if that resolves the issue?  I have tried rebooting the server. Thanks!

What version of SEPm are you on?

I would definitely trying updating to the latest version, RU1  MP1, to see if it clears it up and than troubleshoot from there.

Do you have a lot of .tmp, .err and .dat files which have the "date modified" value as a few or more days old in the subfolders of "..Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\" ? (Kindly check on all the subfolders and their subfolders as well)

If no, then running LUALL in "interactive" mode would indicate at which step the update fails: 

Control Panel>Symantec LiveUpdate>Select "Interactive mode">Save.

Then, Start>run>LUALL

First Liveupdate would contact the Server, then check for required updates, then show a list of updates which it would download, then it would start the download after which the installation would occur.

Currently on version 12.1.1000.157 RU1.

Not sure what you mean by a lot but there are some there.  What would you recommend?  Should I still try LUALL in interactive mode?

Updating SEPM to 12.1 RU1 MP1 resolved this issue.