Endpoint Protection

Created new policy and unable to turn off File Cache-Rescan cache when new definition load.  Anyone else having this issue on 12.1.5?

Is this on the SEPM or SEP client?

Meaning you cannot uncheck the option or...?

If on SEPM, it was a bug in 12.1.5 so you need to upgrade to 12.1.6

Cannot uncheck FileCache option on SEPM

Fix ID: 3640759

Symptom: When you close the Virus and Spyware Protection policy dialog, a redundant instruction saves the default FileCache options. Therefore, the policy does not save FileCache configuration changes.

Solution: Corrected the FileCache dialog logic.

http://www.symantec.com/docs/TECH230558

On the SEPM.  I see a post where someone did this manually by doing the following:

In the meantime, the only way I've managed to change it is to export the policy, open the .dat file with 7zip (or something similar), and edit the main.xml file inside.

Just search for "FileCache" (was on line 177 in my test) in the main.xml file, change the "RescanOnDefReload=1" to "RescanOnDefReload=0" and save back to the archive, then import it back into the SEPM.

Yea was a known issue which was corrected in 12.1.6

Cannot uncheck FileCache option on SEPM

Fix ID: 3640759

Symptom: When you close the Virus and Spyware Protection policy dialog, a redundant instruction saves the default FileCache options. Therefore, the policy does not save FileCache configuration changes.

Solution: Corrected the FileCache dialog logic.

Settings do not hold once changed.  Therefore, unable to assign the policy with changes made.

So the only way to resolve is to do the manual export above?  Unless you are on 12.1.6?

The true fix is to upgrade to 12.1.6 since this was a code change. Otherwise the workaround will suffice if you cannot upgrade.