Endpoint Protection

 View Only
  • 1.  SEPM not updating virus defs

    Posted Aug 28, 2013 04:51 PM

    I'm using SEPM v 12.1.2015.2015 and it has stopped updating the virus definitions.  The latest on the manager is 8/9/13 r3.  I can update the clients manually, but when I run Live Update from the SEPM, I get the following:

    August 28, 2013 3:47:32 PM CDT:  LiveUpdate succeeded.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:32 PM CDT:  LUALL.EXE finished running.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:31 PM CDT:  LUALL.EXE finished.  There were no new content updates. Return code = 1.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:30 PM CDT:  No updates found for Symantec Endpoint Protection Win64 12.1 (English).  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:30 PM CDT:  No updates found for Symantec Endpoint Protection Win32 12.1 (English).  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for Centralized Reputation Settings 12.1 RU2.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for SONAR scan engine Win32 11.0.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for AP Portal List 12.1 RU2.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for TruScan proactive threat scan commercial application list Win32 11.0.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for SONAR scan whitelist Win64 11.0.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for Virus and Spyware definitions Win32 12.1 RU2.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for Intrusion Prevention signatures Win64 11.0.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for Client Intrusion Detection System signatures 12.1 RU2.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for Revocation Data 12.1 RU2 .  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for SONAR scan engine Win64 11.0.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for Submission Control signatures 11.0.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for Submission Control signatures 12.1 RU2.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for SONAR scan data 11.0.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for Symantec Whitelist 12.1 RU2 .  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for SONAR Heuristics engine 12.1 RU2.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for SONAR scan whitelist Win32 11.0.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for Symantec Endpoint Protection Manager Content Catalog 12.1 RU2.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for TruScan proactive threat scan commercial application list Win64 11.0.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for SEPM LiveUpdate Database 12.1.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:29 PM CDT:  No updates found for SONAR scan commercial application engine 11.0.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:28 PM CDT:  No updates found for Extended File Attributes and Signatures 12.1 RU2.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:28 PM CDT:  No updates found for Virus and Spyware definitions Win64 12.1 RU2.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:47:28 PM CDT:  No updates found for Intrusion Prevention signatures Win32 11.0.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:45:21 PM CDT:  LUALL.EXE has been launched.  [Site: My Site]  [Server: INSXCHSRV3]
    August 28, 2013 3:45:21 PM CDT:  Download started.  [Site: My Site]  [Server: INSXCHSRV3]



  • 2.  RE: SEPM not updating virus defs

    Posted Aug 28, 2013 05:32 PM

    Do you have adequate space on C:?

    The defs may be corrupt. Check the SEPM log.liveupdate file. You can also try to clear out the defs per this KBA:

    http://www.symantec.com/docs/TECH166923



  • 3.  RE: SEPM not updating virus defs

    Posted Aug 28, 2013 06:02 PM

    Plenty of room on the c drive - I'll try clearing out the defs



  • 4.  RE: SEPM not updating virus defs

    Posted Aug 28, 2013 11:33 PM

    Any proxy defined in your network?

    if the above does not work , try this

    How to Uninstall and Reinstall LiveUpdate on SEPM 12.1 (Enterprise Edition or Small Business Edition)

     

    http://www.symantec.com/business/support/index?page=content&id=TECH171060

     



  • 5.  RE: SEPM not updating virus defs

    Posted Aug 29, 2013 12:17 AM

    Hi

    Reinstall the Liveupdate and check

    Regards

     



  • 6.  RE: SEPM not updating virus defs

    Posted Aug 29, 2013 04:26 AM

    Hi tdc81,

    I would check your log.liveupdate first of all- what does it list as the outcome of each session?  Is tehre no connection to the LiveUpdate server?  Are products found and downloaded, but then cannot be applied?  The log.liveupdate will tell you.

    Hope this helps!

    Mick



  • 7.  RE: SEPM not updating virus defs

    Posted Aug 29, 2013 04:38 AM

    Perhaps you could go through the below SEPM Liveupdtae troubleshooting article and let us know what you find?

    http://www.symantec.com/docs/TECH105924



  • 8.  RE: SEPM not updating virus defs

    Trusted Advisor
    Posted Aug 29, 2013 06:45 AM

    Hello,

    In your case, SEPM is not updating the definitions. 

    Check these Articles:

    The SEPM does not update virus definitions. Liveupdate not working on the Symantec Endpoint Protection Manager 12.1

    http://www.symantec.com/docs/TECH183178

    Symantec Endpoint Protection Manager (SEPM) 12.1 is not updating 32 or 64 bit virus definitions.

    http://www.symantec.com/docs/TECH166923

     

    Could you also try manually updating the SEPM by downloading the .jdb file on the SEPM version 12.1 and check if that helps:

    You can Download the .jdb file from the Link below:

    http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce

    and follow the document provided below:

    Update definitions for Symantec Endpoint Protection Manager using a JDB file

    Hope that helps!!



  • 9.  RE: SEPM not updating virus defs

    Posted Aug 29, 2013 07:29 AM

    HI,

    Please check the following.

    1.       Enough disk space on system drive and ON DB if you are using SQL DB

    2.       Try to update via .jdb files

    Regards

    Ajin



  • 10.  RE: SEPM not updating virus defs
    Best Answer

    Posted Aug 29, 2013 10:28 AM

    Nevermind, this turned out to be a firewall issue.  Just not sure what changed becuase everything had been working just fine.

    Thanks for your help!



  • 11.  RE: SEPM not updating virus defs

    Posted Sep 03, 2013 04:41 AM

    Hi

    Can you please provide the update on the suggested solution

    Regards