Endpoint Protection

Hi all,

In my enviroment there is the following scenario:

1. The SEP clients receives updates directly from SEPM server;
2. The SEPM server receives the updates from an internel LiveUpdate server and from Symantec LiveUpdate server.

I don't understand why the clients have different date of signature definitions and why their signature date is different from the siganture date of the SEPM server.
In a normal use case the date SEPM signature should be equal to the date of clients definitions, true?

Thanks

How off are they?

The clients will get the updates obviously but they check in based on their heartbeat setting. What is this set to?

Typically yes, the definitions date displayed next to "Latest on Manager" on the HOME section of the SEPM console (not the "Latest from Symantec") represents what the SEPM has in its DB, and what should be pushed out to clients.

I'd like to echo _Brian's post ("Thumbs Up" ) requesting more information.  Is this affecting all clients?

As discribed by Bran it depends on the Herbeat setting. Please confirm the status of clients wheather they are showing online or offline.

You can also update clients manually by right clicking on the group then select the manual update command.