Endpoint Protection

Just upgraded to the server to the latest version of SEP 11.0.5 and pushed out new clients to all of the computers on the network. using find unmanaged clients link.
all of the workstations show the latest version definitions in the server console, but if i go to one of the workstations and open the EP client, it show the old version of antivirus definitions.
So if i open the client on the workstation it shows Friday July 03 2009 r4, but if i look at the same computer through the Symantec Endpoint Protection Manager Console it shows Tuesday September 29 2009 r37
Not sure if the problem existed before the update, becase i never looked at the sep client on the workstation.

 

Hi,

       You mentioned that the SEPM Console shows the latest virus definition date for the client. However when we check at the client end it shows an old definition date. Can you please check the following ;-

>>Check the policy serial number at the SEPM Console as well as on the client. It should be the same.
>>In case it is not then there could be a communication issue.
>>On the client side right click on the endpoint icon with the green dot and select update policy and check whether it made any difference.
>>If you are able to ping the client and vice versa check for any configured Firewall it could also cause this one way communication issue.

Symantec Endpoint Protection Manager Console 4d44-09/28/2008 22:09:57 176

Client:

General Information
-------------------
Server:  SERVER
Group:  My Company\Workstations
Location:  Default
Location awareness:  Enabled
Security policy compliance:  Disabled
SNAC status:  Not Licensed
Policy serial number:  4D44-09/28/2009 22:09:57 176
Engines
-------
SymEvent:  12.8.0.10
Auto-Protect Kernel Driver:  10.3.0.14
Auto-Protect User Mode Interface:  10.3.0.15
LiveUpdate:  3.3.0.92
Common Client:  106.5.0.10
Decomposer:  1.2.5.130
Tamper Protection:  3.5.0.14
Eraser:  7143426.131076

So as you can see the policy serial number is the same on the server and the client. Even definitions are shown correctly in the troubleshooting report, but not on the main page of the SEP client.


-----------
Definitions Pattern:  3045413 r37 (0)

 The year looks diffrent ...is it a TYPO
4d44-09/28/2008 22:09:57 176
4D44-09/28/2009 22:09:57 176

sorry. it's a typo

Is there anything else i can do on the client to figure out why the client gui does not show the definitions correctly?

try deleting the client entry in the SEP Manager and let it reconnect to the server. what version are you using right now?

both client and the server are 11.0.5. will the client get redetected if i remove it from the console?

yes, the client should re-register next time it checks in with the server.

ran cleanwipe v5 on the client and then reinstalled the client.
virus definitions are showing correctly in both places on the client and the server