Hi,

Can you provide virus defination date ?

Windows Latest Symantec Version:

Can you paste log.liveupdate ?

have you configure auto update virus defination in all server ?

Probably those 33 clients got their updates from the Liveupdate server (internet).

Check if "Liveupdate Server" is enabled in the liveupdate policy for those clients. If yes, this is normal. The clients got the new definition before the SEPM downloaded it.

If you don't want the clients to get the updates from Liveupdate server, disable this option in the liveupdate policy for the clients.

looks like LU is enabled on those 32 clients and have then the updates from Symantec Liveupdate.

can you manually run LU on SEPM to know if it fails?

I have also found 3-4 systems in my n/w which is updated with latest definition other is old.

It possible because i have set the schedule at night.

3-4 systems are getting update directly from syamntec LU server not from internal manager.

For your reff... Try the LUALL command and check the status after getting proper defintion.

Agree with above comments, try to run the manually live update and confirm the result.

Yes we have configured the Live Update server(3.0) but if the client taking auto-update from Live Update then my SEPM console must also got updated with latest definition file?

Note:- we don't have internet on SEPM server.