Hi all,
We are on SEPM RU5 and the virus definitions on two servers are showing as not avialable. But here is the crazy part, they are getting their definitions and checking in. When I checked the syslogs I had a failure of getting the definition on one server and then it went to live update. I have the policy set to go through itself to get updates. So I have turned on Use default management server and live update. Those setting are as follows: Group update provider checked nameofserver.domain default port 2967 maximum cache size 2048 delete content updates if unsed 3 maximum number of simultaneous downloads 10. Maximum bandwidth 1mbps (1.5M circuit). Keep trying for 2 days. Idle detection checked. Nothing else on schedule checked. Advanced settings allow the user to manually launch live update is all that is checked. Same policy for both servers which are GUPS. They are both passing out definitions and recieving them. Just that one annoying thing. Please let me know if you have encountered this and possible fixes.
Have you enabled sylink debugging to see what the comms between client/SEPM show?
Enable sylink debugging for Endpoint Protection clients
http://www.symantec.com/docs/TECH104758
Of course after I post this we decide to just upgrade the client to 12.1.5337. We needed to anyway and because this is a server our systems team will have to after hours. So if we are going to reboot might as well just upgrade because we need to anyway now that our SEPM is on RU5. Thank you anyway Brian.
I guess my last post did not post. We decided to just upgrade the client because it needs to be done anyway. Thank you Brian.