WARNING: IE9 Beta causes SEP client not to update virusdefinitions
Hi,
PROBLEM: I've just spend a lot of time trying to figure out what was causing my SEP client 11.0.6100.485 not to get the latest virusdefintions.
SOLUTION: It turned out to be IE 9 Beta which was causing the SEP client not to update, after uninstalling IE 9 (it's listed as a patch in add/remove programs), everything went back to working perfectly!
Environment: Windows 7 Ultimate 32 bit (Danish), IE 9 Beta, SEP Client 11.0.6100.485 (RU6 MP1). SEP client updating through SEPM server.
Note: Uninstalling / reinstalling SEP client did not resolve the issue, and if an intelligentupdater package was applied, it would only update the definitions to that specific date, and still not be able to update to any later definitions automatically.
Best regards,
Michael Pultz-Hansen
Comments
Thanks For the
Update better we will add it in blog tips.
If this Info helps to resolve the issue please Mark as Solution
Thanks
OK, I've created a blog entry
OK, I've created a blog entry too.
/Michael
MCP/MCTS/MCSA - www.compugame.dk
Shouldn't we at least verify
Shouldn't we at least verify this is an issue with IE9 before we start making blog tip posts warning about this? One person having this issue does not constitute a problem with IE9, we should see if this gets reported more before we place the blame solely on IE9.
I'm in the process of testing this right now, I'll post my results.
I think thats an honest
I think thats an honest assessment of the situation.
OK. Two of us tested with IE9
OK. Two of us tested with IE9 and got the same results. No updates as long as IE9 is installed. Even tried disabling the security settings, nothing helped. For now, it's not a good idea to use IE9 on mission critical machines running SEP.
Keep in mind that beta software is not supported.
With more than 6 million
With more than 6 million downloads of IE 9 Beta (http://windowsteamblog.com/ie/b/ie/archive/2010/10/01/ie9-beta-momentum-in-september-6-million-downloads.aspx) I think it would be highly advisable to look into creating a patch to correct this definition update problem, as there a bound to be numerous SEP installations affected.
/Michael
MCP/MCTS/MCSA - www.compugame.dk
At this point we don't know
At this point we don't know if it's a issue with SEP or IE 9. In my experience, this tells me that if it's working fine before you introduce another piece of software, typically it's the new software causing the issue, not the already installed software. Regardless, as mentioned previously, it's beta software and therefore not supported.
Sorry Ted, but this is the
Sorry Ted, but this is the classic chicken & egg problem.
If Symantec does not at least work on these issues during the beta phase, then software will only be supported 6 months+ AFTER release date. & Symantec have a history of doing this.
That's not pro-active, agile or secure!
Your comments dismiss the problem & completely ignore the fact that this is a issue that is Symantec responsibility to resolve (even if IE9 is Microsofts product and was introduced afterwards). Symantec is now aware of the issue (you are a Symantec employee) and should engage Microsoft pronto.
d that beta application might
d that beta application might be chaned at any moment by the manufacturer. Moreover, beta application should not be installed in a production environment iMHO.
--
Cheers,
Symantec Technical Specialist
Symantec Certified Specialist
MCP & MCITP
Cisco Certified Network Associate
Citrix Certified Administrator
Ted is correct. IE 9 is still
Ted is correct. IE 9 is still in beta phase. I am sure that Symantec will come up with an fix once it is released.
Symantec does not provide support for installing or running Symantec Endpoint Protection on Beta versions
Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)
I agree! Beta software might
I agree! Beta software might be changed at any moment.
--
Cheers,
Symantec Technical Specialist
Symantec Certified Specialist
MCP & MCITP
Cisco Certified Network Associate
Citrix Certified Administrator
Drat. I just reinstalled
Drat. I just reinstalled Windows 7 to troubleshoot IE9 beta locking up on flash content. I had the lastest version of SEP 11 so I could have checked this, but I will say that in the weeks of running IE9 beta SEP did not notify me that my definitions were out of date. Either I didn't experience the issue or there is a separate problem of notifying out-of-date definitions. I assume it as the former.
Michael, thanks for
Michael, thanks for posting.
Just to let you know, even though IE9 is in beta, we recognise this could potentially be a big issue and our engineering team is currently investigating what the problem is and where it lies.
More info as I get it.
Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint
Update
Hi All,
I just wanted to update this post with our findings so far.
It would appear that the IE9 beta changes the way in which the InternetReadFileEx API works. The way we use this currently means the response we are expecting is "true" but with a data size of 0. When IE9 is installed, this changes and the response is now "false" which in turn then breaks the product process.
We are currently talking to Microsoft to understand why this has changed and then to understand how we can work with the change.
Again, more info as I get it.
thanks
Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint
Just wanted to confirm this
Just wanted to confirm this was the cause of one of our systems not getting definition updates from the SEP server... We removed IE9 beta, reinstalled SEP and the system seems to be retriving updates as normal.
I'm using the SEP 11 MR 6 MP1
I'm using the SEP 11 MR 6 MP1 11.0.6100.645
and also IE9 Beta in my current laptop of Windows 7 Business with IE9 9.0.7930.16406 as at now 12 October 2010 my SEP client is working fine with the green dots.
/* Infrastructure Support Engineer */
Hi Albert, Could you please
Hi Albert,
Could you please confirm the definition dates in the SEP client, are they the newest 11. october 2010 r54 or later?
How long have you had the IE 9 Beta installed?
Are you updating definitions through SEPM or LiveUpdate?
Best regards,
Michael
MCP/MCTS/MCSA - www.compugame.dk
Hi Michael, I'm using SEP
Hi Michael,
I'm using SEP Manager / server to push the update to the client, i didn't initiate it manually (start | run | luall)
/* Infrastructure Support Engineer */
Hi Albert, It does indeed
Hi Albert,
It does indeed look quite good and green :)
For how long have you had the IE 9 Beta installed?
NOTE: The IE 9 TechPreview did not cause any problems with SEP client
/Michael
MCP/MCTS/MCSA - www.compugame.dk
Hi Michael, Sorry that the
Hi Michael,
Sorry that the image was cut half here's the original link: https://www-secure.symantec.com/connect/imagebrowser/view/image/1506471/_original
I installed that IE9 Beta since one week after the Beta got released.
/* Infrastructure Support Engineer */
Hmm, very interesting... Do
Hmm, very interesting...
Do you by any chance have another alternative browser installed and chosen that as your default browser? Chrome, Firefox...?
Do you use a proxy to connect to the internet, are there any proxy settings present in IE 9 Beta?
/Michael
MCP/MCTS/MCSA - www.compugame.dk
Yes I Do
Yes Michael,
I do have another browser which I'm using it now (Chrome) and I also got Squid Proxy in my company set.
yes of course by defaults I set the proxy in my office with GPO Active Directory.
/* Infrastructure Support Engineer */
All right, I had only one
All right, I had only one browser installed in my PC, perhaps it's only an issue when IE 9 Beta is the default browser...
Could you perhaps try to set IE 9 Beta as the default browser and check if definition updates are being applied as expected or if the indeed do not get updated when IE9 Beta is the default browser?
/Michael
MCP/MCTS/MCSA - www.compugame.dk
Hi Mike, Is it possible for
Hi Mike,
Is it possible for you to update the SEP Client to the latest MR6 MP1 ?
/* Infrastructure Support Engineer */
I'm allready at SEP Client
I'm allready at SEP Client 11.0.6100.485 (RU6 MP1).
/Michael
MCP/MCTS/MCSA - www.compugame.dk
IE 9 Bug logged.in Connect site - add your vote
https://connect.microsoft.com/IE/feedback/details/612496/ie-9-beta-appears-to-break-symantec-endpoint-protection-live-update-functionality
Hi Praveen, thanks for your
Hi Praveen, thanks for your reply, however i can't access it from here:
Page Not Found
The content that you requested cannot be found or you do not have permission to view it.
If you believe you have reached this page in error, click the Help link at the top of the page to report the issue and include this ID in your e-mail: 2af27d84-6705-4864-9563-b45f4080fe4e
Microsoft Connect welcome page.
/* Infrastructure Support Engineer */
Thanks for the update Michael...
Thanks for the update Michael...
i have ie9 beta on my Win7
i have ie9 beta on my Win7 64bit OS working fine.
MCSA 2003. MCP.MCTS.MCITP. Symantec Certified Specialist.
Hi Jedi_B, could you please
Hi Jedi_B, could you please confirm if you have an alternative browser installed as your default browser?
I suspect the update problems are only present if IE 9 Beta is the default browser...
/Michael
MCP/MCTS/MCSA - www.compugame.dk
Yes. IE9 beta is my only
Yes. IE9 beta is my only browser!
MCSA 2003. MCP.MCTS.MCITP. Symantec Certified Specialist.
That's interesting! I've have
That's interesting! I've have only tested the problem on a Windows 7 32 bit, and have unfortunately not the possibility to test on x64.
However I wonder if the IE 9 Beta is installed as both 32 bit and 64 bit in your OS...
Could you please check if perhaps you still have the old IE as 32 bit on the OS?
/Michael
MCP/MCTS/MCSA - www.compugame.dk
MCSA 2003. MCP.MCTS.MCITP. Symantec Certified Specialist.
Hi Jedi_B, thanks for the
Hi Jedi_B,
thanks for the screenshot - it seems to be a 32 bit IE 9 Beta which you have taken a screenshot of, do you also have the 64 bit IE 9 Beta installed ( should read 64 bit after the version number, or at least that's what IE 8 does... ).
/Michael
MCP/MCTS/MCSA - www.compugame.dk
Michael, my IE9 beta is of
Michael, my IE9 beta is of course 32 bit, perhaps that is the cause ? sorry i forgot to mention that earlier.
/* Infrastructure Support Engineer */
No, its 64bit.
No, its 64bit.
MCSA 2003. MCP.MCTS.MCITP. Symantec Certified Specialist.
Great, perhaps it's only a
Great, perhaps it's only a problem if the SEP client 32 bit AND IE 9 Beta 32 bit is installed, at least that narrows the amount of impacted installations down quite a bit, since most new Windows 7 installations are 64 bit.
/Michael
MCP/MCTS/MCSA - www.compugame.dk
yes ie9 is not
yes ie9 is not
Warm Regards
Swapnil Khare
Symantec Endpoint Protection
My specs
I have a number of workstations with Windows 7 64bit and the latest SEP 11 client.
On the workstations that we installed IE9 beta on, the Symantec client no longer updates it's definitions.
I have also set Chrome 6 as my default browser, restarted the workstation but still the Symantec client will not update at all.
It's definitely not limited to 32bit only.
Yes there is a problem With IE 9 Beta
yes there is a issue with IE 9 Beta. also found there are some system which are getting updated with IE9 but i need to check the configuration of system and IE 9 version i.e. 32/64 bit.
Thanks
Regards,
Siddhesh
If this response answers your query, please mark it as a solution
Test your backups to make sure they will get you back up! Because a backup failing is just as bad as failing to backup!
Official KB article from Symantec
Just to keep track of all the info, I'll post a link to the official Symantec KB article regarding this problem:
http://www.symantec.com/business/support/index?page=content&id=TECH141506&actp=search&viewlocale=en_US&searchid=1287126658420
/Michael
MCP/MCTS/MCSA - www.compugame.dk
I am glad i found this
I am glad i found this thread. Last week i noticed that my client 11.06 MP1 wouldnt update on its own. After 2-3 days i would have to push the updates to it manually from SEPM.
My current system is:
Win 7 Pro 64 bit
IE 9 Beta
Firefox 4 beta
I have removed IE 9 and after a reboot my computer went from 10/13/2010 virus defs to 10/14/2010 r40.
Ill be monitoring it to see if it gets todays defs, but it looks promising!
Hi jglass05 Did you get the
Hi jglass05
Did you get the definition updates after uninstalling IE9 Beta?
/Michael
MCP/MCTS/MCSA - www.compugame.dk
Sorry for the late
Sorry for the late response.
Yes, after rolling back to IE 8 my client began updating immediately.
IE 9 beta should be creating
IE 9 beta should be creating problems for other product which is based on IIS. I hope this problem will get resolved with the full version.
If a forum post solves your problem, please flag it as a solution. If you like an article, blog post or download vote it up.
I've been running the IE9
I've been running the IE9 beta as my default browser since the day it was first publicly released. My OS is Windows 7 x64. No issues whatsoever with the SEP client. My defs are up-to-date.
Jon
I just stumbled across this
I just stumbled across this post.. I am in the same boat. Running IE 9 beta on a windows 7 32 bit machine and my definitions were not updating as well.
I found another fix for a similar problem about defs not updating. The solution was to create a new test group on my SEPM and have it to use Symantec's Live Update server only and then put the computer into that group that wasnt receiving definition updates. This worked for me. Might be a quick/temp fix.
Mine works ok
Hello
Just thought I would add that I installed IE9 beta the day it was released and have no issues on a Windows 7 x64 machine and the definitions are dated today.
IE9 is the default browser.
The machine is also fully updated with all windows updates.
Robin
I am running IE9 Beta 64bit
I am running IE9 Beta 64bit on Windows 7 Ultimate 64bit. My definitions are up-to-date. No issues at all.
Re
Thanks for update on this issue.
Regards, M.R
hi i have this problem
hi
i have this problem too
colleagues who have IE9 beta installed and have no problems with definitions update please open c:\ProgramData\Symantec\LiveUpdate\Downloads\ and you can find there a lot of files
it means that your client is downloading its definitions from internet or local liveupdate server
there is no miracle
dear symantec any news about
dear symantec
any news about this?
Just happened across this:
Just happened across this: http://social.answers.microsoft.com/Forums/en-US/InternetExplorer/thread/863d8f3d-c4ab-43e6-9d57-e163ea3baddd
Tested it in my lab environment and on a couple of machines in my production network and it works. This is good for the users that decide they want to install IE9 Beta without being fully aware of the issues it may cause to the security of their workplace. If you have a way access a remote command console (Dameware NT Utilities for example), you can run the command provided in the link, force a remote shutdown on the machine.
Update from Symantec.
I just recieved an update from Symantec Support stating that the case has been escalated to the engineering team and has been identified as a product defect. It will be fixed in the next build.
Best regards,
Michael
MCP/MCTS/MCSA - www.compugame.dk
Thanks for updating the
Thanks for updating the issue.
Regards'
Ajit Jha
Technical Consultant
STS
Should now be fixed in RU6
Should now be fixed in RU6 MP2
Endpoint Knowledge Base
Security Best Practices
Issue is foxed :))
This issue is fixed in MR6 MP2 has worked in my case.
Resolved an issue where Internet Explorer 9 Beta
Would you like to reply?
Login or Register to post your comment.