Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SEPM reports virus defs outdated, client shows up to date defs in console

Created: 12 Jul 2013 | 8 comments

Not sure if anyone else has seen this discrepancy before but according to SEPM it shows a significant number of clients out of date on their virus definitons.  Our PC Support guys however go to the PC and find that in the console it shows all definitions up to date.  The few discrepancies that they have shown me have all shown in SEPM that the last loaded definitions were from 6/20.  Been attempting to push an update from SEPM to try and force it to correct itself but after over an hour it still is showing not recieved.  Usually I see some movement by now.  Any ideas would be great.

Operating Systems:

Comments 8 CommentsJump to latest comment

.Brian's picture

What's the exact version?

Are the clients connection to the SEPM (green dot?)

You can enable sylink logging on the affected client to see what is going on.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Ariphaneus's picture

SEP11.  At the moment one of them has the green dot showing in SEPM although that has changed as originally all of them did. At the moment I've only looked at a few of them and was trying to work out a time to get onto the client machines.  Will have to doublecheck last check in.

Ariphaneus's picture

One of the updates I pushed completed but no change in the client.  Last check in on the examples I'm working from is today.

AJ_01's picture

Article

Clients cannot send data back to Symantec Endpoint Protection Manager

 

Article:TECH105348  |  Created: 2008-01-09  |  Updated: 2009-01-30  |  Article URL http://www.symantec.com/docs/TECH105348

Other - Remove the defintion of the client and see the result

How to clear out corrupted definitions for a Symantec Endpoint Protection client manually

 

Article:TECH103176  |  Created: 2007-01-31  |  Updated: 2012-03-29  |  Article URL http://www.symantec.com/docs/TECH103176

How to determine if virus definitions of Symantec Endpoint Protection client (SEP) 11 or 12 Small Business Edition, are corrupted

 

Article:TECH97677  |  Created: 2009-01-23  |  Updated: 2012-07-02  |  Article URL http://www.symantec.com/docs/TECH97677

 

Regard

AJ

Rafeeq's picture

These are the two documents I would suggest

Symantec Endpoint Protection Manager "Virus Definitions Distribution" shows incorrect date for virus definitions inspite of all clients being update-to-date

 

http://www.symantec.com/business/support/index?page=content&id=TECH123272

 

Clients cannot send data back to Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH105348

 
 
Kindly try this troubleshooting step: 

1. Browse to \Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agentinfo

2. Look for any .err files or tmp files & Dat files

3. If you find anything which is not processed by sepm then it might be the reason for the client data loss

4. Stop SEPM services from services.msc 

5. Delete all the files inside the location \Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\agentinfo

6. Restart the SEPM services.

Check the SEPM now if still issue persist go for step 7

 

7. Run the Management server configuration wizard.

SameerU's picture

Hi

Can you please upgrade to SEP 12.1.3

Regards