Endpoint Protection

Our Win2000 server successfully downloads the latest definitions using LiveUpdate.  But the user interface reports and old date for the definition version.  I looked through the knowlege base and found an article that suggest the only fix is to upgrade to the latest version.  Right now that is not an option for our organization. 

Is there a way to force Corporate Edition to use the most recent version?  Also, is there a way to verify which definition is being used in order to confirm what is being reported by the user interface?

Thank you in advance for any information.

Tim Banyas

 Symantec Antivirus 8.0 reached its End of Support Life as of November 30, 2005 and Symantec Antivirus 8.1 reached its End of Support Life as of January 31, 2007, as defined in the Symantec Enterprise Technical Support Policy. Therefore virus definition updates are no longer supported for this product.

Symantec Antivirus 9.x will reach its End of Support Life as of March 31, 2009. Virus definition updates for version 9.x will be discontinued on April 1, 2009. Please contact your account manager or reseller for information about our current shipping versions.

http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce

Currently Symantec is running on Version 11.
Nothing can be done to fix that issue.

Program Files\Common Files\Symantec Shared\VirusDefs\USAGE.DAT
open with Notepad it will show you which definition version your AV is using.

Hello,

Please Update your Product.

The Latest version of Symantec Antivirus (Enterprise) is Symantec Endpoin Protection 11.0.5001 (MR5)

Please call Symantec, to purchase and upgrade your product.

Please Call Enterprise Sales at 8006318124

Inaddition to let you know that, you would have to Uninstall Symantec Antivirus version 8.0 to upgrade to 11.0.5001

Vikram Kumar-SAV to SEP,  Mithun Sanghav

Thank you for your suggestion.  However, as I stated in my original post, upgrading is not an option right now.  My organization has already purchased Symantec Endpoint Protection.  I have not installed it because I do not have the time right now because I in the middle of serveral other projects.  What I need is a temporary solution  until I have the time to perform the upgrade.  Live update worked fine until a few day ago and it still works fine on the clients, so the issue is not incompatability with an old version.

Can anyone tell me a temporary work around until I can perform the upgrade?


 

download XDB files from internet and update the server in turn the server should update the clients.
If that is not working then it means either symantec has stopped the definition update for 8.1 or it is version flaw that it is showing old definitions check the usage.dat to know what is the exact version your client is using.

Chk this:
Updating virus definitions for Symantec AntiVirus Corporate Edition 8.x and 9.x
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2002103012571948?Open

Tim, you'll actually want to contact your salesperson to see if they can do anything for you in the interim.  I know we offer the ability to update virus definitions on the legacy SAV 9 clients for an additional monthly fee, but I'm not sure if that's something that's available for SAV 8 or not.

The virus definitions we release via LiveUpdate, Rapid Release and Intelligent Updater are not tested against the legacy versions (SAV 9 and previous), as they're no longer supported.  If they work that's great, but we don't offer any support.  If tomorrow's definitions have a flaw that cause SAV 9 to bluescreen, I'm sorry to say that we won't investigate that.

(This is independent of the "extra time" definition service I spoke about earlier...if you've purchased that and the systems bluescreen, I'm fairly sure there's support for that)

There really isn't any workarounds.  I'd highly recommend that you work with your management team to accelerate your SEP deployment plans, as well as contact your salesperson to see if you can get the "extra time" definitions.

Probably some confusion. When Symantec says that the product is EOSL and the virus definitions will not be supported, they mean that the definitions will not be tested as thoroughly as they were. By all means, the 8.x\9.x servers\clients should take the definitions. 9.x clients are still updating fine for us.

Thank you again.  I was unable to update the server using this method.  It looks as though I am going to have to reorder my priorites and Install version 11

Actually, Sandeep, that's only partially correct.  Defs are not tested in any fashion with the old products.  Should they still work?  More than likely not, as we continue to change and refine the scanning engines and technologies that come down with virus definitions.  If they're working for you now, great, but frankly they shouldn't.  We've had numerous reports from customers indicating that they are having issues getting definitions on SAV 9 and older machines, and these reports are only going to increase.

Thanks everyone for your input.  I am reordering my tasks to allocate time to upgrade and I am downloading the CDs as I type. 

Probably, that might be the inside news. Though this is what our TAM had to say when the product got EOSL and we wanted to be sure that it does not have any potential impact.

We will continue to provide definition update for SAV9 as SAV10 is still supported and both product use the same definition file.

When SAV9 will be EOSL, basically we will not test anymore the definition on this product like we do for SAV8 or older version, so it can happened some issue with new engine for example that generate some problem with the product.

To be honest, at the moment we don’t have this kind of error with SAV8, so I don’t think it will happened with SAV9.

So to reply to your question, yes, we will continue to provide definition update to SAV9, but for a support point of view, we will recommend to you to upgrade to a higher (supported) version because if some bug are detected, we will not fix it anymore (i.e: Sygate SSE 4.1).

I currently have a number of HP servers running 2000 server w/sp4, and AntiVirus 10.1.4.400.  We use a DVD/RW for database backups, Roxio 6 basic and drag to disk. Everything has been fine until December when I updated using the 12/21/2009 update. Whenever a DVD is inserted into the drive the server crashes.

stop: 0X000000C2 (0X00000040, 0X80000000, 0X00000000) BAD_POOL_CALLER

Temporary resolution has been to uninstall SAV, reinstall, and update with a 9/2009 update.
These servers are running mission critical applications and upgrades are not an option due to the limitations of the apps. Any help would be appreciated