Video Screencast Help

SEPM reports virus defs outdated, client shows up to date defs in console

Created: 12 Jul 2013 | 8 comments

Not sure if anyone else has seen this discrepancy before but according to SEPM it shows a significant number of clients out of date on their virus definitons.  Our PC Support guys however go to the PC and find that in the console it shows all definitions up to date.  The few discrepancies that they have shown me have all shown in SEPM that the last loaded definitions were from 6/20.  Been attempting to push an update from SEPM to try and force it to correct itself but after over an hour it still is showing not recieved.  Usually I see some movement by now.  Any ideas would be great.

Operating Systems:

Comments 8 CommentsJump to latest comment

ᗺrian's picture

What's the exact version?

Are the clients connection to the SEPM (green dot?)

You can enable sylink logging on the affected client to see what is going on.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Ariphaneus's picture

SEP11.  At the moment one of them has the green dot showing in SEPM although that has changed as originally all of them did. At the moment I've only looked at a few of them and was trying to work out a time to get onto the client machines.  Will have to doublecheck last check in.

Ariphaneus's picture

One of the updates I pushed completed but no change in the client.  Last check in on the examples I'm working from is today.

AJ_01's picture


Clients cannot send data back to Symantec Endpoint Protection Manager
Article:TECH105348  |  Created: 2008-01-09  |  Updated: 2009-01-30  |  Article URL

Other - Remove the defintion of the client and see the result

How to clear out corrupted definitions for a Symantec Endpoint Protection client manually
Article:TECH103176  |  Created: 2007-01-31  |  Updated: 2012-03-29  |  Article URL
How to determine if virus definitions of Symantec Endpoint Protection client (SEP) 11 or 12 Small Business Edition, are corrupted
Article:TECH97677  |  Created: 2009-01-23  |  Updated: 2012-07-02  |  Article URL



Rafeeq's picture

These are the two documents I would suggest

Symantec Endpoint Protection Manager "Virus Definitions Distribution" shows incorrect date for virus definitions inspite of all clients being update-to-date

Clients cannot send data back to Symantec Endpoint Protection Manager

Kindly try this troubleshooting step: 

1. Browse to \Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agentinfo

2. Look for any .err files or tmp files & Dat files

3. If you find anything which is not processed by sepm then it might be the reason for the client data loss

4. Stop SEPM services from services.msc 

5. Delete all the files inside the location \Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\agentinfo

6. Restart the SEPM services.

Check the SEPM now if still issue persist go for step 7

7. Run the Management server configuration wizard.