Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

WARNING: IE9 Beta causes SEP client not to update virusdefinitions

Updated: 12 Jan 2011 | 58 comments
Michael Pultz-Hansen's picture
+3 3 Votes
Login to vote

Hi,

PROBLEM: I've just spend a lot of time trying to figure out what was causing my SEP client 11.0.6100.485 not to get the latest virusdefintions.

SOLUTION: It turned out to be IE 9 Beta which was causing the SEP client not to update, after uninstalling IE 9 (it's listed as a patch in add/remove programs), everything went back to working perfectly!

Environment: Windows 7 Ultimate 32 bit (Danish), IE 9 Beta, SEP Client 11.0.6100.485 (RU6 MP1). SEP client updating through SEPM server.

 

Note: Uninstalling / reinstalling SEP client did not resolve the issue, and if an intelligentupdater package was applied, it would only update the definitions to that specific date, and still not be able to update to any later definitions automatically.

 

Best regards,

Michael Pultz-Hansen

Comments

Mahesh Roja's picture
07
Oct
2010
1 Vote +1
Login to vote

Thanks For the

Update better we will add it in blog tips.

If this Info helps to resolve the issue please Mark as Solution

Thanks

Michael Pultz-Hansen's picture
07
Oct
2010
3 Votes +3
Login to vote

OK, I've created a blog entry

OK, I've created a blog entry too.

 

/Michael

MCP/MCTS/MCSA - www.compugame.dk

Ted G.'s picture
07
Oct
2010
4 Votes +4
Login to vote

Shouldn't we at least verify

Shouldn't we at least verify this is an issue with IE9 before we start making blog tip posts warning about this? One person having this issue does not constitute a problem with IE9, we should see if this gets reported more before we place the blame solely on IE9.

I'm in the process of testing this right now, I'll post my results.

browserman's picture
17
Dec
2010
1 Vote +1
Login to vote

I think thats an honest

I think thats an honest assessment of the situation.

Ted G.'s picture
07
Oct
2010
4 Votes +4
Login to vote

OK. Two of us tested with IE9

OK. Two of us tested with IE9 and got the same results. No updates as long as IE9 is installed. Even tried disabling the security settings, nothing helped. For now, it's not a good idea to use IE9 on mission critical machines running SEP.

Keep in mind that beta software is not supported.

Michael Pultz-Hansen's picture
07
Oct
2010
1 Vote +1
Login to vote

With more than 6 million

With more than 6 million downloads of IE 9 Beta (http://windowsteamblog.com/ie/b/ie/archive/2010/10/01/ie9-beta-momentum-in-september-6-million-downloads.aspx) I think it would be highly advisable to look into creating a patch to correct this definition update problem, as there a bound to be numerous SEP installations affected.

 

/Michael

MCP/MCTS/MCSA - www.compugame.dk

Ted G.'s picture
08
Oct
2010
3 Votes +1
Login to vote

At this point we don't know

At this point we don't know if it's a issue with SEP or IE 9. In my experience, this tells me that if it's working fine before you introduce another piece of software, typically it's the new software causing the issue, not the already installed software. Regardless, as mentioned previously, it's beta software and therefore not supported.

Ian_C.'s picture
20
Oct
2010
2 Votes +2
Login to vote

Sorry Ted, but this is the

Sorry Ted, but this is the classic chicken & egg problem.

If Symantec does not at least work on these issues during the beta phase, then software will only be supported 6 months+ AFTER release date. & Symantec have a history of doing this.

That's not pro-active, agile or secure!

Your comments dismiss the problem & completely ignore the fact that this is a issue that is Symantec responsibility to resolve (even if IE9 is Microsofts product and was introduced afterwards). Symantec is now aware of the issue (you are a Symantec employee) and should engage Microsoft pronto.

Pawel Lakomski's picture
28
Nov
2010
1 Vote +1
Login to vote

d that beta application might

d that beta application might be chaned at any moment by the manufacturer. Moreover, beta application should not be installed in a production environment iMHO.

--

Cheers,

Symantec Technical Specialist
Symantec Certified Specialist
MCP & MCITP
Cisco Certified Network Associate
Citrix Certified Administrator

 

Prachand's picture
08
Oct
2010
4 Votes +4
Login to vote

Ted is correct. IE 9 is still

Ted is correct. IE 9 is still in beta phase. I am sure that Symantec will come up with an fix once it is released.

Symantec does not provide support for installing or running Symantec Endpoint Protection on Beta versions

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

Pawel Lakomski's picture
28
Nov
2010
1 Vote +1
Login to vote

I agree! Beta software might

I agree! Beta software might be changed at any moment.

--

Cheers,

Symantec Technical Specialist
Symantec Certified Specialist
MCP & MCITP
Cisco Certified Network Associate
Citrix Certified Administrator

 

PNutts's picture
09
Oct
2010
2 Votes +2
Login to vote

Drat. I just reinstalled

Drat. I just reinstalled Windows 7 to troubleshoot IE9 beta locking up on flash content. I had the lastest version of SEP 11 so I could have checked this, but I will say that in the weeks of running IE9 beta SEP did not notify me that my definitions were out of date. Either I didn't experience the issue or there is a separate problem of notifying out-of-date definitions. I assume it as the former.

Paul Murgatroyd's picture
09
Oct
2010
4 Votes +4
Login to vote

Michael, thanks for

Michael, thanks for posting.

Just to let you know, even though IE9 is in beta, we recognise this could potentially be a big issue and our engineering team is currently investigating what the problem is and where it lies.

More info as I get it.

 

 

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

Paul Murgatroyd's picture
21
Oct
2010
2 Votes +2
Login to vote

Update

Hi All,

 

I just wanted to update this post with our findings so far.

It would appear that the IE9 beta changes the way in which the InternetReadFileEx API works.  The way we use this currently means the response we are expecting is "true" but with a data size of 0.  When IE9 is installed, this changes and the response is now "false" which in turn then breaks the product process.

We are currently talking to Microsoft to understand why this has changed and then to understand how we can work with the change.

 

Again, more info as I get it.

thanks

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

Ryan H's picture
11
Oct
2010
2 Votes +2
Login to vote

Just wanted to confirm this

Just wanted to confirm this was the cause of one of our systems not getting definition updates from the SEP server...  We removed IE9 beta, reinstalled SEP and the system seems to be retriving updates as normal.

Albert Widjaja's picture
11
Oct
2010
2 Votes +2
Login to vote

I'm using the SEP 11 MR 6 MP1

I'm using the SEP 11 MR 6 MP1 11.0.6100.645 

and also IE9 Beta in my current laptop of Windows 7 Business with IE9 9.0.7930.16406 as at now 12 October 2010 my SEP client is working fine with the green dots.

/* Infrastructure Support Engineer */

Michael Pultz-Hansen's picture
11
Oct
2010
2 Votes +2
Login to vote

Hi Albert, Could you please

Hi Albert,

Could you please confirm the definition dates in the SEP client, are they the newest 11. october 2010 r54 or later?

How long have you had the IE 9 Beta installed?

Are you updating definitions through SEPM or LiveUpdate?

Best regards,

Michael

MCP/MCTS/MCSA - www.compugame.dk

Albert Widjaja's picture
11
Oct
2010
2 Votes +2
Login to vote

Hi Michael, I'm using SEP

Hi Michael,

I'm using SEP Manager / server to push the update to the client, i didn't initiate it manually (start | run | luall)

/* Infrastructure Support Engineer */

Michael Pultz-Hansen's picture
12
Oct
2010
2 Votes +2
Login to vote

Hi Albert, It does indeed

Hi Albert,

It does indeed look quite good and green :)

For how long have you had the IE 9 Beta installed?

NOTE: The IE 9 TechPreview did not cause any problems with SEP client

/Michael

MCP/MCTS/MCSA - www.compugame.dk

Albert Widjaja's picture
12
Oct
2010
2 Votes +2
Login to vote

Hi Michael, Sorry that the

Hi Michael,

Sorry that the image was cut half here's the original link: https://www-secure.symantec.com/connect/imagebrowser/view/image/1506471/_original

I installed that IE9 Beta since one week after the Beta got released.

/* Infrastructure Support Engineer */

Michael Pultz-Hansen's picture
12
Oct
2010
2 Votes +2
Login to vote

Hmm, very interesting... Do

Hmm, very interesting...

Do you by any chance have another alternative browser installed and chosen that as your default browser? Chrome, Firefox...?

Do you use a proxy to connect to the internet, are there any proxy settings present in IE 9 Beta?

/Michael

MCP/MCTS/MCSA - www.compugame.dk

Albert Widjaja's picture
12
Oct
2010
2 Votes +2
Login to vote

Yes I Do

Yes Michael,

I do have another browser which I'm using it now (Chrome) and I also got Squid Proxy in my company set.

yes of course by defaults I set the proxy in my office with GPO Active Directory.

/* Infrastructure Support Engineer */

Michael Pultz-Hansen's picture
12
Oct
2010
2 Votes +2
Login to vote

All right, I had only one

All right, I had only one browser installed in my PC, perhaps it's only an issue when IE 9 Beta is the default browser...

Could you perhaps try to set IE 9 Beta as the default browser and check if definition updates are being applied as expected or if the indeed do not get updated when IE9 Beta is the default browser?

/Michael

MCP/MCTS/MCSA - www.compugame.dk

Albert Widjaja's picture
12
Oct
2010
2 Votes +2
Login to vote

Hi Mike, Is it possible for

Hi Mike,

Is it possible for you to update the SEP Client to the latest MR6 MP1 ?

/* Infrastructure Support Engineer */

Michael Pultz-Hansen's picture
12
Oct
2010
2 Votes +2
Login to vote

I'm allready at  SEP Client

I'm allready at  SEP Client 11.0.6100.485 (RU6 MP1).

 

/Michael

MCP/MCTS/MCSA - www.compugame.dk

Albert Widjaja's picture
11
Oct
2010
2 Votes +2
Login to vote

Hi Praveen, thanks for your

Hi Praveen, thanks for your reply, however i can't access it from here:

Page Not Found

The content that you requested cannot be found or you do not have permission to view it. 

If you believe you have reached this page in error, click the Help link at the top of the page to report the issue and include this ID in your e-mail: 2af27d84-6705-4864-9563-b45f4080fe4e 

Microsoft Connect welcome page. 

/* Infrastructure Support Engineer */

Vinja's picture
12
Oct
2010
2 Votes +2
Login to vote

Thanks for the update Michael...

Thanks for the update Michael... smiley

Please don't forget to mark your thread solved with whatever answer helped you : )

Thanks & Regards,
Vinja 
Jedi_B's picture
12
Oct
2010
2 Votes +2
Login to vote

i have ie9 beta on my Win7

i have ie9 beta on my Win7 64bit OS working fine.

MCSA 2003. MCP.MCTS.MCITP. Symantec Certified Specialist.

Michael Pultz-Hansen's picture
12
Oct
2010
1 Vote +1
Login to vote

Hi Jedi_B, could you please

Hi Jedi_B, could you please confirm if you have an alternative browser installed as your default browser?

I suspect the update problems are only present if IE 9 Beta is the default browser...

/Michael

MCP/MCTS/MCSA - www.compugame.dk

Jedi_B's picture
13
Oct
2010
1 Vote +1
Login to vote

Yes. IE9 beta is my only

Yes. IE9 beta is my only browser!

MCSA 2003. MCP.MCTS.MCITP. Symantec Certified Specialist.

Michael Pultz-Hansen's picture
13
Oct
2010
1 Vote +1
Login to vote

That's interesting! I've have

That's interesting! I've have only tested the problem on a Windows 7 32 bit, and have unfortunately not the possibility to test on x64.

However I wonder if the IE 9 Beta is installed as both 32 bit and 64 bit in your OS...

Could you please check if perhaps you still have the old IE as 32 bit on the OS?

/Michael

MCP/MCTS/MCSA - www.compugame.dk

Jedi_B's picture
13
Oct
2010
2 Votes +2
Login to vote

  

 

 

MCSA 2003. MCP.MCTS.MCITP. Symantec Certified Specialist.

Michael Pultz-Hansen's picture
13
Oct
2010
2 Votes +2
Login to vote

Hi Jedi_B, thanks for the

Hi Jedi_B,

thanks for the screenshot - it seems to be a 32 bit IE 9 Beta which you have taken a screenshot of, do you also have the 64 bit IE 9 Beta installed ( should read 64 bit after the version number, or at least that's what IE 8 does... ).

/Michael

MCP/MCTS/MCSA - www.compugame.dk

Albert Widjaja's picture
13
Oct
2010
1 Vote +1
Login to vote

Michael, my IE9 beta is of

Michael, my IE9 beta is of course 32 bit, perhaps that is the cause ? sorry i forgot to mention that earlier.

/* Infrastructure Support Engineer */

Jedi_B's picture
13
Oct
2010
2 Votes +2
Login to vote

No, its 64bit.  

No, its 64bit.

 

MCSA 2003. MCP.MCTS.MCITP. Symantec Certified Specialist.

Michael Pultz-Hansen's picture
13
Oct
2010
2 Votes +2
Login to vote

Great, perhaps it's only a

Great, perhaps it's only a problem if the SEP client 32 bit AND IE 9 Beta 32 bit is installed, at least that narrows the amount of impacted installations down quite a bit, since most new Windows 7 installations are 64 bit.

/Michael

MCP/MCTS/MCSA - www.compugame.dk

Swapnil khare's picture
13
Oct
2010
1 Vote +1
Login to vote

yes ie9 is not

yes ie9 is not

Warm Regards
Swapnil Khare
Symantec Endpoint Protection

 

KerryRJ's picture
13
Oct
2010
1 Vote +1
Login to vote

My specs

I have a number of workstations with Windows 7 64bit and the latest SEP 11 client.

On the workstations that we installed IE9 beta on, the Symantec client no longer updates it's definitions.

I have also set Chrome 6 as my default browser, restarted the workstation but still the Symantec client will not update at all.

It's definitely not limited to 32bit only.

Siddh's picture
14
Oct
2010
1 Vote +1
Login to vote

Yes there is a problem With IE 9 Beta

yes there is a issue with IE 9 Beta. also found there are some system which are getting updated with IE9 but i need to check the configuration of system and IE 9 version i.e. 32/64 bit.

Thanks

Regards,

Siddhesh

If this response answers your query, please mark it as a solution

Test your backups to make sure they will get you back up! Because a backup failing is just as bad as failing to backup!

Michael Pultz-Hansen's picture
15
Oct
2010
1 Vote +1
Login to vote

Official KB article from Symantec

Just to keep track of all the info, I'll post a link to the official Symantec KB article regarding this problem:

http://www.symantec.com/business/support/index?page=content&id=TECH141506&actp=search&viewlocale=en_US&searchid=1287126658420

/Michael

MCP/MCTS/MCSA - www.compugame.dk

jglass05's picture
15
Oct
2010
2 Votes +2
Login to vote

I am glad i found this

I am glad i found this thread.  Last week i noticed that my client 11.06 MP1 wouldnt update on its own.  After 2-3 days i would have to push the updates to it manually from SEPM. 

My current system is:

Win 7 Pro 64 bit

IE 9 Beta

Firefox 4 beta

 

I have removed IE 9 and after a reboot my computer went from 10/13/2010 virus defs to 10/14/2010 r40. 

Ill be monitoring it to see if it gets todays defs, but it looks promising!

Michael Pultz-Hansen's picture
19
Oct
2010
0 Votes 0
Login to vote

Hi jglass05 Did you get the

Hi jglass05

Did you get the definition updates after uninstalling IE9 Beta?

/Michael

MCP/MCTS/MCSA - www.compugame.dk

jglass05's picture
26
Oct
2010
0 Votes 0
Login to vote

Sorry for the late

Sorry for the late response. 

 

Yes, after rolling back to IE 8 my client began updating immediately. 

Saeed's picture
19
Oct
2010
0 Votes 0
Login to vote

IE 9 beta should be creating

IE 9 beta should be creating problems for other product which is based on IIS. I hope this problem will get resolved with the full version.

If a forum post solves your problem, please flag it as a solution. If you like an article, blog post or download vote it up.
 

J.Bonner's picture
20
Oct
2010
0 Votes 0
Login to vote

I've been running the IE9

I've been running the IE9 beta as my default browser since the day it was first publicly released. My OS is Windows 7 x64. No issues whatsoever with the SEP client. My defs are up-to-date.

Jon

ISP236's picture
21
Oct
2010
0 Votes 0
Login to vote

I just stumbled across this

I just stumbled across this post..   I am in the same boat.  Running IE 9 beta on a windows 7 32 bit machine and my definitions were not updating as well.

I found another fix for a similar problem about defs not updating.  The solution was to create a new test group on my SEPM and have it to use Symantec's Live Update server only and then put the computer into that group that wasnt receiving definition updates.  This worked for me.  Might be a quick/temp fix.

robinwilson16's picture
20
Oct
2010
1 Vote +1
Login to vote

Mine works ok

Hello

Just thought I would add that I installed IE9 beta the day it was released and have no issues on a Windows 7 x64 machine and the definitions are dated today.

IE9 is the default browser.

The machine is also fully updated with all windows updates.

Robin

Gianilac's picture
25
Oct
2010
0 Votes 0
Login to vote

I am running IE9 Beta 64bit

I am running IE9 Beta 64bit on Windows 7 Ultimate 64bit. My definitions are up-to-date. No issues at all.

Symantec World's picture
27
Oct
2010
0 Votes 0
Login to vote

Re

Thanks for update on this issue.

Regards, M.R

Viachaslau Kabak's picture
28
Oct
2010
0 Votes 0
Login to vote

hi i have this problem

hi

i have this problem too

colleagues who have IE9 beta installed and have no problems with definitions update please open c:\ProgramData\Symantec\LiveUpdate\Downloads\ and you can find there a lot of files

it means that your client is downloading its definitions from internet or local liveupdate server

there is no miracle

Viachaslau Kabak's picture
02
Nov
2010
0 Votes 0
Login to vote

dear symantec any news about

dear symantec

any news about this?

Chance Webster's picture
05
Nov
2010
0 Votes 0
Login to vote

Just happened across this:

Just happened across this: http://social.answers.microsoft.com/Forums/en-US/InternetExplorer/thread/863d8f3d-c4ab-43e6-9d57-e163ea3baddd

Tested it in my lab environment and on a couple of machines in my production network and it works.  This is good for the users that decide they want to install IE9 Beta without being fully aware of the issues it may cause to the security of their workplace.  If you have a way access a remote command console (Dameware NT Utilities for example), you can run the command provided in the link, force a remote shutdown on the machine. 

Michael Pultz-Hansen's picture
18
Nov
2010
0 Votes 0
Login to vote

Update from Symantec.

I just recieved an update from Symantec Support stating that the case has been escalated to the engineering team and has been identified as a product defect. It will be fixed in the next build.

Best regards,

Michael

MCP/MCTS/MCSA - www.compugame.dk

Ajit Jha's picture
28
Nov
2010
0 Votes 0
Login to vote

Thanks for updating the

Thanks for updating the issue.

Regards'

Ajit Jha

Technical Consultant

STS

Brian81's picture
01
Dec
2010
2 Votes +2
Login to vote

Should now be fixed in RU6

Should now be fixed in RU6 MP2

Resolved an issue where Internet Explorer 9 Beta prevents clients from downloading content from Symantec Endpoint Protection Manager
Fix ID: 2167737
Symptom: After installing Internet Explorer 9 Beta, the Symantec Endpoint Protection client is no longer able to download content from Symantec Endpoint Protection Manager.
Solution: Code changes to support API changes made by Microsoft in Internet Explorer 9 Beta.
 
From Release Notes
http://www.symantec.com/business/support/index?page=content&id=TECH103087
kavin's picture
06
Dec
2010
0 Votes 0
Login to vote

Issue is foxed :))

This issue is fixed in MR6 MP2 has worked in my case.

GPCALI's picture
10
Dec
2010
1 Vote -1
Login to vote

Resolved an issue where Internet Explorer 9 Beta

Resolved an issue where Internet Explorer 9 Beta prevents clients from downloading content from Symantec Endpoint Protection Manager
Fix ID: 2167737
Symptom: After installing Internet Explorer 9 Beta, the Symantec Endpoint Protection client is no longer able to download content from Symantec Endpoint Protection Manager.
Solution: Code changes to support API changes made by Microsoft in Internet Explorer 9 Beta.