Endpoint Protection

 View Only
Expand all | Collapse all

SEPM Virus Definitions Distribution shows old Definitions version

Migration User

Migration UserMar 11, 2013 09:50 AM

  • 1.  SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 08, 2013 03:00 AM

    Hi,

    I opened Symantec Endpoint Protection Manager \ Admin \ Servers \ Local Site \ Tasks \ LiveUpdate Downloads. In "Antivirus and antispyware definitions Win32 11.0 MicroDefsB.CurDefs" I see download time and revision date is correct - the 5th of March.

    The problem is that in SEPM "Home" section under "Virus Definitions Distribution : Last 12 Hours" it shows definitions for the 23rd of February. It shows old definitions date.

    What is wrong and is any way I could fix this?

    thanks,



  • 2.  RE: SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 08, 2013 03:29 AM

    What SEPM Version are you using? Check this known issue:

    Symantec Endpoint Protection Manager "Virus Definitions Distribution" shows incorrect date for virus definitions inspite of all clients being update-to-date

    http://www.symantec.com/docs/TECH123272

     

    ...are your sep clients up to date with 5th of march defs as welll?



  • 3.  RE: SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 08, 2013 03:43 AM

    Hi,

    Please check with below link.

    http://www.symantec.com/business/support/index?page=content&id=TECH123272

    http://www.symantec.com/business/support/index?page=content&id=TECH123272&locale=en_US

     



  • 4.  RE: SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 08, 2013 03:57 AM

    I checked, permissions is for Everyone Full control, any other idea?



  • 5.  RE: SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 08, 2013 03:57 AM

    It might take some time to show up.

    open LU policy in SEPM

    under content check what version is showing for AV/AS 



  • 6.  RE: SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 08, 2013 04:29 AM

    In SEPM \ Policies \ LiveUpdate (under "View Policies) \ LiveUpdate Content I see only policy Created automatically during product installation.

    In this policy Antivirus and antispyware definitions is marked as to Use latest available.

     



  • 7.  RE: SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 08, 2013 04:40 AM

    if you click on edit  you should be able to see the lastest version listed there. is it latest for 32 and 64 bit versions?

     



  • 8.  RE: SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 08, 2013 05:28 AM

    In default "LiveUpdate Content Policy" I click Edit Policy and in "Security Definitions" on "Antivirus and antispyware definitions" click "Select a revision" click edit and there is correct revision date for "Antivirus and antispyware definitions". Did you meen this?



  • 9.  RE: SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 08, 2013 05:43 AM

    Now I can not see any definitions under - Virus Definitions Distribution : Last 12 Hours



  • 10.  RE: SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 08, 2013 05:45 AM

    Yes I ment the same. Just to confirm that SEPM  has indeed go the updates and its been pushed out.

    In the home page tab  there are two options one is Latest symantec verion available and version on symantec manager.

    The first one queries the Internet.

    Check this document

    http://www.symantec.com/business/support/index?page=content&id=TECH123272&locale=en_US

    Any Err or tmp files under this location

     

    Browse to \Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agentinfo

     Look for any .err files or tmp files & Dat files

     



  • 11.  RE: SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 08, 2013 06:08 AM

    your provided link opens: http://www.symantec.com/page.jsp?id=symwise-support

    and I cound not open agentinfo as only "agent" folder is available and no info folder under agent folder: C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent

    did I missed something?



  • 12.  RE: SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 08, 2013 06:19 AM

    here it is

    http://www.symantec.com/business/support/index?page=content&id=TECH123272&locale=en_US

    sometimes if its not able to resolve by default it will got to that page, if tried again it will open again

    i ment agent folder. any .err or tmp files inside?

     

     



  • 13.  RE: SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 08, 2013 06:25 AM

    Folder:

    C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent

    Subfolders:

    1C57A5ADAC100B30011ED915F8E6C064
    49CC1E70AC187B0200A140C2A3C1ADC9
    049D6AB2AC187B0201E85ADF380E0C93
    192B8C66AC187B020180B4F92E9DFFCF
    A0AAC188AC187B020004198E01C81EDF
    command
    default
    whitelist

    And yes inbox has Full access to everyone.

    I am very lost...



  • 14.  RE: SEPM Virus Definitions Distribution shows old Definitions version

    Posted Mar 11, 2013 09:50 AM

    Hi,

    any ideas how to solve this issue?