SEPM is not downloading latest PTP definitions
Updated: 05 Jun 2010 | 12 comments
Why is my SEPM server not downloading the latest Proactive Threat Protection definitions and associated files? They have been stuck on 8/20/2008 for some time now and when LU runs on the SEPM console, it shows that they are up to date.
discussion Filed Under:
Comments
Hi
you need to re-register the liveudate..please followe these steps it should fix the issue.
LiveUpdate and content troubleshooting for the Symantec Endpoint Protection Manager
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008091613592648
"C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin\LuCatalog.exe" -cleanup
This command will unregister all Symantec Endpoint Protection Manager content from LiveUpdate. We will then proceed to re-register the content again with LiveUpdate.
"C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin\LuCatalog.exe" -update
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Rafeeq, that did not work.
Rafeeq, that did not work.
Hi
Please follow these steps and then register the liveudpat. should fix the issue.
https://www-secure.symantec.com/connect/articles/how-clear-corrupt-virus-definitions-sepm
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
I think something else is
I think something else is wrong because I've done that as well and every time I run LU, it says the Scan Engine Win32/64 11.0 is up to date but it's not. Unless of course the last time it was updated is 8/20/2008 which I find very hard to believe.
I checked the LU settings for the server and this is what it lists for "Content Types to Download"
I don't see an option to update the PTP scan engine. Is that part of the "Client updates" option?
Run a repair for SEPM and
Run a repair for SEPM and then try
Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)
Repair did not work either. I
Repair did not work either.
I also noticed after running LU in the console that "Intrusion Prevention signatures Win32 11.0 failed to update."
this worked for us...we had the same issue
The link will tell you how to stop the service. Edit the registry and then delete files that may be corrupt, causing this problem.
It is easy to follow.
I will tell you that we ALSO had to un install windows defender to make this all happen. We weren't even using it, but somehow it helped us work on this update issue.
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/691fb01f62f2a700882573c2006d6de7?OpenDocument
A couple things got updated
A couple things got updated after doing that but the issue still remains that the scan engine is still dated 8-20-2008.
PTP scan engine
We're running RU5 and we have the same TS/PTP scan engine;
Win32/64 11.0 2008-8-20 rev. 001
Back to the top... I built a
Back to the top...
I built a new SEPM server and a new database and clients are still not updating.
I would like to use PTP since we paid for this whole package but I can't push out software that doesn't update correctly.
Rebuild the content
Rebuild the content folder
Stop SEPm and SEPM database service
Take a backup and delete everything inside
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\Content
and
\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content
then start both the services.
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
I've actually done that as
I've actually done that as well without success. It was in one of the tech articles I found.
I just tested something that surprisingly worked.
I changed the LiveUpdate content policy to "Select a revision" for "TruScan proactive threat scan commercial application list" which lists the latest revision as 12-04-2009 rev. 018 and set the primary LiveUpdate policy to pull updates from the Symantec internet site instead of a GUP. Now PTP is showing the latest defs. I reset the option in the content policy to "Use latest available" to see if starts pulling updates correctly in the future...I'll be keeping my eye on it.
Would you like to reply?
Login or Register to post your comment.