Endpoint Protection

 View Only
  • 1.  whether this is indicative of a problem?

    Posted Jan 20, 2014 11:57 AM

    Remote file path: http://10.64.101.103:8014/content/{810D5A61-809F-49c2-BD75-177F0647D2BA}/140103018/xdelta140103008.dax    
    7789    04/01/2014 01:35:42    Error    1207030C    Downloaded new content update from the management server failed.   
     
    Remote file path: http://10.64.101.103:8014/content/{535CB6A4-441F-4e8a-A897-804CD859100E}/140103001/Full.zip    
    7790    04/01/2014 01:46:51    Information    12070800    An update for {535CB6A4-441F-4e8a-A897-804CD859100E} was successfully installed.  The new sequence number is 140103001.    
    7791    04/01/2014 01:46:51    Information    1207030C    Downloaded new content update from the management server successfully



  • 2.  RE: whether this is indicative of a problem?

    Posted Jan 20, 2014 12:03 PM

    It depends. It looks like it failed the first time but was than successful. Perhaps the network blinked and the communication was cutoff but was successful the second time around.

    You can enable sylink debugging on the affected client in the future to view full communication:

    How to enable Sylink debugging for the Symantec Endpoint Protection 11.x and 12.1 client in the Windows Registry

    http://www.symantec.com/docs/TECH104758



  • 3.  RE: whether this is indicative of a problem?

    Posted Jan 20, 2014 12:50 PM

    You can check the contentinfo.txt file to see what 810D5A61-809F-49c2-BD75-177F0647D2BA this represents. sometimes this may not be needed. it will be in 

    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\Inetpub\content



  • 4.  RE: whether this is indicative of a problem?

    Posted Jan 20, 2014 02:27 PM

    810D5A61-809F-49c2-BD75-177F0647D2BA is SEPC Iron Revocation List v12.1.

    In your example download of delta for 810D5A61-809F-49c2-BD75-177F0647D2BA failed.

    Second example shows - successful download of defs for 535CB6A4-441F-4e8a-A897-804CD859100E.

    ...those two are completely different monikers. Check further in the logs if you find any more entries for 810D5A61-809F-49c2-BD75-177F0647D2BA? If it was downloaded after this first failure it should be fine - but if it is failing all over again it my be some corruption of the definitions itself.

     



  • 5.  RE: whether this is indicative of a problem?

    Posted Apr 23, 2014 09:31 AM

    Thanks this can be closed as I got what is required