Video Screencast Help

Symantec Endpoint Protection disk space

Created: 16 Jan 2013 | 4 comments

On a Windows SBS 2008 server we have Symantec Endpoint Protection Manager installed (version 12.1.671.4971). Also, the Symantec Endpoint Protection client is installed on the server (same version).

The server has a limited amount of diskspace, and they are starting to run out. I've run a scan with TreeSize to see what's taking up all the space and I've noticed this:

C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Definitions\VirusDefs

This folder is taking up 6,2GB and it contains folders like "20130110.024", "20121217.003", etc. etc. There are about 16 of such folders in the VirusDefs folder, which is weird because I've set in the SEPM settings to only keep the last 3.

But, I've also found this folder:


This folders is about 1,2GB and contains three subfolders like "20130110.005". Since this folder only contains three folders it would seem the settings of SEPM are applied here.

We're getting to my question: Can I safely delete the old definitions folders from the VirusDefs folder? And where could I set the setting to only keep the latest three virus definitons, like in the virusdefs32 folder.

Comments 4 CommentsJump to latest comment

Ashish-Sharma's picture


Disk Space Management procedures for the Symantec Endpoint Protection Manager

You can do the following:

1. change the number of revisions retained by the Symantec Endpoint Protection Manager

2. edit the database retention settings for the Symantec Endpoint Protection Manager to help save disk space:

Try the following links this should fix you're issue ....

Symantec Endpoint Security Manager: How is Database Maintenance scheduled?


Changing the log settings to reduce the size of the database


How to quickly purge the SEPM log tables on a SQL server

Check this thread

Thanks In Advance

Ashish Sharma

Brɨan's picture

How many content revisions are you keeping?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

MichaelD50's picture

Known issue; upgrade your SEPM to 12.1 RU2 (12.1.2015)

Rebooting the server may also help until upgrade.


SebastianZ's picture

The definitions is this folder are SEP client definitions:

C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Definitions\VirusDefs

The other folder: C:\ProgramData\Symantec\Definitions\SymcData\virusdefs32 belongs to SEPM - the settings here with 3 revisions should be fine.

Problem is with he clients revisions - the default value of revisions kept on clients in version 12.1 should be 1 - if you see more this is a known defect - please have a look at the following KB: