Symantec Endpoint Protection Client displays wrong version of definitions
Updated: 21 May 2010 | 10 comments
This issue has been solved. See solution.
Just upgraded to the server to the latest version of SEP 11.0.5 and pushed out new clients to all of the computers on the network. using find unmanaged clients link.
all of the workstations show the latest version definitions in the server console, but if i go to one of the workstations and open the EP client, it show the old version of antivirus definitions.
So if i open the client on the workstation it shows Friday July 03 2009 r4, but if i look at the same computer through the Symantec Endpoint Protection Manager Console it shows Tuesday September 29 2009 r37
Not sure if the problem existed before the update, becase i never looked at the sep client on the workstation.
Uninstalling the client and reinstalling did not help. What other options do I have?
Client is running windows xp sp3
Discussion Filed Under:
Comments
SEP Client displays wrong version of definition
Hi,
You mentioned that the SEPM Console shows the latest virus definition date for the client. However when we check at the client end it shows an old definition date. Can you please check the following ;-
>>Check the policy serial number at the SEPM Console as well as on the client. It should be the same.
>>In case it is not then there could be a communication issue.
>>On the client side right click on the endpoint icon with the green dot and select update policy and check whether it made any difference.
>>If you are able to ping the client and vice versa check for any configured Firewall it could also cause this one way communication issue.
Thanks & Regards Sandip C Sali
Symantec Endpoint Protection
Symantec Endpoint Protection Manager Console 4d44-09/28/2008 22:09:57 176
Client:
General Information
-------------------
Server: SERVER
Group: My Company\Workstations
Location: Default
Location awareness: Enabled
Security policy compliance: Disabled
SNAC status: Not Licensed
Policy serial number: 4D44-09/28/2009 22:09:57 176
Engines
-------
SymEvent: 12.8.0.10
Auto-Protect Kernel Driver: 10.3.0.14
Auto-Protect User Mode Interface: 10.3.0.15
LiveUpdate: 3.3.0.92
Common Client: 106.5.0.10
Decomposer: 1.2.5.130
Tamper Protection: 3.5.0.14
Eraser: 7143426.131076
So as you can see the policy
So as you can see the policy serial number is the same on the server and the client. Even definitions are shown correctly in the troubleshooting report, but not on the main page of the SEP client.
-----------
Definitions Pattern: 3045413 r37 (0)
The year looks diffrent
The year looks diffrent ...is it a TYPO
4d44-09/28/2008 22:09:57 176
4D44-09/28/2009 22:09:57 176
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
The year looks diffrent
sorry. it's a typo
next step
Is there anything else i can do on the client to figure out why the client gui does not show the definitions correctly?
try deleting the client entry
try deleting the client entry in the SEP Manager and let it reconnect to the server. what version are you using right now?
Best regards,
Bekir Burak Durmaz
both client and the server
both client and the server are 11.0.5. will the client get redetected if i remove it from the console?
yes, the client should
yes, the client should re-register next time it checks in with the server.
nothing helped
ran cleanwipe v5 on the client and then reinstalled the client.
virus definitions are showing correctly in both places on the client and the server
Would you like to reply?
Login or Register to post your comment.