Endpoint Protection

 View Only

  • 1.  SONAR getting definition failure daily but no actual problem seen

    Posted Nov 28, 2013 09:06 PM

    Hi All,

     

    Two of my 2008 R2 servers' SEP client are generating SONAR erros daily during the definition update time, like the following:

    - SONAR has generated an error: code 0: description: Definition Failure

    Though at the next second it shows the following event:

    - New virus definition file loaded. Version: 131126002.

     

    And opening both of their SEP clients I still get a green tick saying no problems have been found.

    I am wondering then is the SONAR error ignorable? Why does it keep happening daily?

    Grateful if anyone could kindly provide some pointers to stop this error from appearing.

     

    Thank you for reading!



  • 2.  RE: SONAR getting definition failure daily but no actual problem seen
    Best Answer

    Posted Nov 28, 2013 09:13 PM

    Have you tried running a repair on the client?

    What's the exact SEP version this is occuring on?



  • 3.  RE: SONAR getting definition failure daily but no actual problem seen

    Posted Nov 28, 2013 09:15 PM
    Try to below articles
     
    How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually
     


  • 4.  RE: SONAR getting definition failure daily but no actual problem seen

    Posted Nov 28, 2013 09:34 PM

    Check the below article

    SONAR Definitions are not updated on SEP 12.1 Clients.
    Environment - Windows Server 2008 R2(SEPM: v 12.1)

    http://www.symantec.com/docs/TECH178125

     



  • 5.  RE: SONAR getting definition failure daily but no actual problem seen

    Broadcom Employee
    Posted Nov 28, 2013 10:35 PM

    on gui whats the definition for SONAR.

    can you check the system log on the client side?

     



  • 6.  RE: SONAR getting definition failure daily but no actual problem seen

    Posted Nov 28, 2013 11:04 PM

    Hi

    This happens if the clients are having corrupted definitions.

    You can cleanup the definitions from the affected SEP client manually and then try to download them once again to see if there are any issues.

    Regards

     



  • 7.  RE: SONAR getting definition failure daily but no actual problem seen

    Broadcom Employee
    Posted Nov 29, 2013 11:42 AM

    Hi,

    Thank you for posting in Symantec community.

    Simple repair via add/remove program should help you in this case.



  • 8.  RE: SONAR getting definition failure daily but no actual problem seen

    Posted Dec 02, 2013 03:43 AM

    Running "Repair" seems to have solved it so far.

    There is still a warning sign over the Symantec Iron Driver but left it running for a few days, error disappeared.

     

    Thank you all for the help!