Video Screencast Help

Symantec endpoint protection manager is not updating definition

Created: 02 Sep 2013 • Updated: 07 Jan 2014 | 19 comments
deepaknk's picture
This issue has been solved. See solution.

Symantec endpoint protection manager is not updating definition

 

 

1 ) clean and update LuCatalog

2)  past jdb file in this D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\incoming path it extracted but Sepm not updated.

 

Os :- windows server 2008 R2 enterprise 64 bit

Sepm:- RU3

 

Operating Systems:

Comments 19 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

Could you restart the SEPM server OR SEPM services (either or both) and check if that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Rafeeq's picture

Restart sepm service, if it failes to extract it will be renamed to jdb.err.

Did that disappear after pasting it?

deepaknk's picture

i have tried by interactive mode but it didn't give any error

deepaknk's picture

i tired by sepm console it stated successfully and finish but not updating my sepm console definition

 

 

 

 

September 2, 2013 4:27:17 PM IST:  LiveUpdate succeeded.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:27:17 PM IST:  LUALL.EXE finished running.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:27:17 PM IST:  LUALL.EXE successfully updated the content. Return code = 0.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:27:14 PM IST:  No updates found for SPC AntiVirus Client Mac 12.1 (English).  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:27:14 PM IST:  No updates found for Symantec Endpoint Protection Win64 12.1 (English).  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:27:14 PM IST:  No updates found for Symantec Endpoint Protection Win32 12.1 (English).  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:27:14 PM IST:  No updates found for Centralized Reputation Settings 12.1 RU2.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:27:14 PM IST:  No updates found for SONAR scan engine Win32 11.0.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:27:14 PM IST:  No updates found for AP Portal List 12.1 RU2.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:27:14 PM IST:  No updates found for TruScan proactive threat scan commercial application list Win32 11.0.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:27:14 PM IST:  No updates found for SONAR scan whitelist Win64 11.0.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:54 PM IST:  No updates found for Intrusion Prevention signatures Win64 11.0.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:54 PM IST:  No updates found for Client Intrusion Detection System signatures 12.1 RU2.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:54 PM IST:  No updates found for Revocation Data 12.1 RU2 .  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:54 PM IST:  No updates found for SONAR scan engine Win64 11.0.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:54 PM IST:  No updates found for Submission Control signatures 11.0.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:54 PM IST:  No updates found for Submission Control signatures 12.1 RU2.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:54 PM IST:  No updates found for SONAR scan data 11.0.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:54 PM IST:  No updates found for Symantec Whitelist 12.1 RU2 .  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:54 PM IST:  No updates found for SONAR Heuristics engine 12.1 RU2.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:54 PM IST:  No updates found for SONAR scan whitelist Win32 11.0.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:53 PM IST:  No updates found for Symantec Endpoint Protection Manager Content Catalog 12.1 RU2.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:53 PM IST:  No updates found for TruScan proactive threat scan commercial application list Win64 11.0.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:53 PM IST:  No updates found for SEPM LiveUpdate Database 12.1.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:53 PM IST:  No updates found for SONAR scan commercial application engine 11.0.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:53 PM IST:  No updates found for Extended File Attributes and Signatures 12.1 RU2.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:25:53 PM IST:  No updates found for Mac Host Integrity content 12.1.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:24:52 PM IST:  No updates found for Windows Host Integrity content 12.1 RU2.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:24:52 PM IST:  No updates found for Intrusion Prevention signatures Win32 11.0.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:23:47 PM IST:  LUALL.EXE has been launched.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]
September 2, 2013 4:23:47 PM IST:  Download started.  [Site: Site INCPLSEPAPP]  [Server: INCPLSEPAPP]

deepaknk's picture

hi

i need to check anything from SQL  database server and which server is require for running for sql server

SMLatCST's picture

I'd recommend running through the below article (which is brilliant for troubleshooting LU issues on the SEPM):

http://www.symantec.com/docs/TECH105924

Crucially, it tells you where to locate the Log.liveupdate and sesmlu.log files, which are really useful in troubleshooting.

Log.liveupdate should tell you where the LU client is going and how it's trying to get there (i.e. going to Symantec LiveUpdate via an internal proxy server), which should help you determine why the SEPM is not picking up any new defs.

The sesmlu.log should tell you if the SEPM is having any problems trying to process the downloaded defs like the article below:

http://www.symantec.com/docs/TECH147268

This all assumes you have plenty of disk space on the SEPM and SQL server, and that the DB itself hasn't hit any size limits.

SameerU's picture

Hi

Reinstall the liveupdate and check

Regards

 

deepaknk's picture

hi sameerU,

 

I tired but it failed

 

I also tired by interactive mode but in product  catalog it showing four product update only it update successfully

SameerU's picture

Hi

Wha is the database on which SEPM is installed

Regards

 

Kazim's picture

Would you check the size of sem5_content file of sem5 database on SQL server? If it's about 20 GB please check this

http://kazimbozkurt.wordpress.com/2013/12/12/syman...

SOLUTION
deepaknk's picture

I am facing this problem once again last time I deleted all content and update it all in console but I just upgrade the size of sem5_content database to 40,000 I hope this will work.

form today morning I am facing this issue let see what happen

cemilebaşak's picture

Hi;

 

I had the same problem. I applied the following links the problem get solved.

 

https://www.symantec.com/business/support/index?page=content&id=TECH106075

 

https://www.symantec.com/business/support/index?page=content&id=TECH93563

 

Regards;

Cemile Denerel BAŞAK

Note: Please mark as solution if its help you.

Chetan Savade's picture

Hello Everyone,

Issue appears to be resolved at this point please run liveupdate through SEPM to get latest definitions.

Refer this thread: https://www-secure.symantec.com/connect/forums/sepm-1107-liveupdate-not-downloading-anti-virus-definitions#comment-9635361

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

John Santana's picture

Yes, i'm facing the same issue here, even after doing the "luall", the SEP definition in the whole company is not updated.

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.