Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

SEPM is not downloading latest PTP definitions

Updated: 05 Jun 2010 | 12 comments
BadAndy's picture
0 0 Votes
Login to vote

Why is my SEPM server not downloading the latest Proactive Threat Protection definitions and associated files? They have been stuck on 8/20/2008 for some time now and when LU runs on the SEPM console, it shows that they are up to date.

Capture2.JPGCapture.JPG

discussion Filed Under:

Comments

Rafeeq's picture
20
Nov
2009
0 Votes 0
Login to vote

Hi

you need to re-register the liveudate..please followe these steps it should fix the issue.

LiveUpdate and content troubleshooting for the Symantec Endpoint Protection Manager

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008091613592648

    1. From the Start menu select Run
    2. Enter the following command including the quotes:

      "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin\LuCatalog.exe" -cleanup

      This command will unregister all Symantec Endpoint Protection Manager content from LiveUpdate. We will then proceed to re-register the content again with LiveUpdate.

       

    3. From the Start menu select Run
    4. Enter the following command including the quotes:

      "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin\LuCatalog.exe" -update

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

BadAndy's picture
22
Nov
2009
0 Votes 0
Login to vote

 Rafeeq, that did not work.

 Rafeeq, that did not work.

Rafeeq's picture
22
Nov
2009
0 Votes 0
Login to vote

Hi

Please follow these steps and then register the liveudpat. should fix the issue.

https://www-secure.symantec.com/connect/articles/how-clear-corrupt-virus-definitions-sepm

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

BadAndy's picture
23
Nov
2009
0 Votes 0
Login to vote

 I think something else is

 I think something else is wrong because I've done that as well and every time I run LU, it says the Scan Engine Win32/64 11.0 is up to date but it's not. Unless of course the last time it was updated is 8/20/2008 which I find very hard to believe.

I checked the LU settings for the server and this is what it lists for "Content Types to Download"

Capture.JPGCapture.JPG

I don't see an option to update the PTP scan engine. Is that part of the "Client updates" option?

Prachand's picture
23
Nov
2009
0 Votes 0
Login to vote

Run a repair for SEPM and

Run a repair for SEPM and then try

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

BadAndy's picture
23
Nov
2009
0 Votes 0
Login to vote

Repair did not work either. I

Repair did not work either.

I also noticed after running LU in the console that "Intrusion Prevention signatures Win32 11.0 failed to update."

skeernc's picture
23
Nov
2009
0 Votes 0
Login to vote

this worked for us...we had the same issue

The link will tell you how to stop the service.  Edit the registry and then delete files that may be corrupt, causing this problem.
It is easy to follow.
I will tell you that we ALSO had to un install windows defender to make this all happen.  We weren't even using it, but somehow it helped us work on this update issue.

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/691fb01f62f2a700882573c2006d6de7?OpenDocument

BadAndy's picture
23
Nov
2009
0 Votes 0
Login to vote

A couple things got updated

A couple things got updated after doing that but the issue still remains that the scan engine is still dated 8-20-2008.
Capture.JPG 

bfordz's picture
27
Nov
2009
0 Votes 0
Login to vote

PTP scan engine

We're running RU5 and we have the same TS/PTP scan engine;
Win32/64 11.0  2008-8-20 rev. 001

BadAndy's picture
04
Dec
2009
0 Votes 0
Login to vote

 Back to the top... I built a

 Back to the top...

I built a new SEPM server and a new database and clients are still not updating.

I would like to use PTP since we paid for this whole package but I can't push out software that doesn't update correctly.

Vikram Kumar-SAV to SEP's picture
04
Dec
2009
0 Votes 0
Login to vote

Rebuild the content

Rebuild the content folder 

Stop SEPm and SEPM database service
Take a backup and delete everything inside

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\Content

and 
\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content

then start both the services.

BadAndy's picture
04
Dec
2009
0 Votes 0
Login to vote

 I've actually done that as

 I've actually done that as well without success. It was in one of the tech articles I found.

I just tested something that surprisingly worked.

I changed the LiveUpdate content policy to "Select a revision" for "TruScan proactive threat scan commercial application list" which lists the latest revision as 12-04-2009 rev. 018 and set the primary LiveUpdate policy to pull updates from the Symantec internet site instead of a GUP. Now PTP is showing the latest defs. I reset the option in the content policy to "Use latest available" to see if starts pulling updates correctly in the future...I'll be keeping my eye on it.