Endpoint Protection

My distribution list is stuck on 6-8, but when I check my client I have current definitions.  When I check the report it also only goes to 6-8, so I can't check my clients to see who isn't getting updates.  Any ideas?  I'm running endpoint 11.0.4

You might have corupted definitions. See - How to clear out corrupted definitions for a Symantec Endpoint Protection Client

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007123111551948

Hi,

       Please check whether the policies are being exported to the client. I am attaching a screen shot for the same. Also try running a scan for the client machine in question from the SEPM. This will force the client to report to the SEPM nad thereby the client will report its status to the SEPM.

All of those settings seem fine... and actually, now that I've checked the clients are no longer updating either.  The endpoint protection manager home page shows 6/8 definitions, but the client shows 6/18 definitions.  I just manually did a content download and it said it completed normally and that my virus definitions should be 6/25.

I tried deleting the definitions and that didn't make a difference.

Also, upon closer inspection, it appears that the home page of Symantec Endpoint Protection manager isn't updating at all.  The number of infections remains the same.  My attacks for the last 24 hours hasn't changed.  So I can't tell if any of the clients are getting attacked or not.

Has this SEPM server been promoted to a DC recently?

michellemiller,

good eve. Could you please let me know if your network has proxy servers?

One easy suggest - Restarting the server most the time fixes singular issues. This could be one of those.

I do not have a proxy server.  A reboot hasn't helped, I've rebooted the server twice.  And the server is not a DC.

Whats the status of Update Reports in Realtime??

The update reports show 6/8...

Another developement... it seems that if I manually push the updates to the clients, it updates with the current definitions.

michellemiller,

Please try the following steps

1. Uninstall LiveUpdate
2. Reboot the computer
3. Run LUSETUP from CD1\SEPM folder
4. Open a command prompt browse to:
C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
5. Type lucatalog -update and press Enter.

Check if this works,

If the above steps did not solve the problem, check the DOM permission.
refer,
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2002103013521548

Check if you are able to ping
1. liveupdate.symantecliveupdate.com
2. www.symantec.com
3. securityresponse.symantec.com
4. symantec.com

Hi guys,

I am facing a similar issue with the virus definition distribution not updating from the SEPM home console. definition date is a week older. phisical check shows that clients are getting the latest def files but the reporting seems an issue.

I tried all the steps mentionned above with no result.

thanks,

Hani,

....

Hi

Did u tried running Rx4DefsSEP on the SEPM.

Ajit Jha

-  What is the version of the manager EG : 11.0.4000 
- Also go the liveupdate policy & check if the client are taking def form the manager or from the symantec..
- You can also verify that if the manager is actually downloading the def or not..

- GO to admin tab select the server, then click, select local site MY site, then click on show liveupdate downloads..
- Check over here if the manager is actually downloading the def..

Hi Did any of the above troubleshooting resolved the issue?

Try to run a rapid response for a while, It will help the SEP Manager and client to cope up with the latest virus definition..

I think first you will need to make sure if your manager itself is updated or not?

What is the version of your manager? try to upgrade the manager to the latest version as well as the SEP clients

Some points to clear, you mean ma'am your SEPM are not updating? as well as your client?(ofcourse)