I have SEPM 12.1.5 and clients 12.1.3 .

I can manage and control every thingmy clients (Restart , Scan , policies) , with exeption update content .

When i run the command , it told that 100% completed successfully for all clients .\

but my clients still out of date and virus definitions not updated .!!!!!!!!

Hi,

Thank you for posting in Symantec community.

SEPM liveupdate runs successfully? Total how many clients are affected?

Could you restart 1-2 clients and see if it makes any difference?

I would suggest to go through this flowchart, very helpful.

Symantec Endpoint Protection: LiveUpdate Troubleshooting Flowchart

http://www.symantec.com/business/support/index?page=content&id=TECH95790&locale=en_US

Enable sylink debugging for one affected client:

Enable sylink debugging for Endpoint Protection clients

SEPM Liveupdate working fine .

I have 580 Clients .

I try restart some clients , but without any changes ..

Thanks for the update. Out of 580 clients how many are affected? If all the clients are affected I would suggest to restart the SEPM machine if possible.

How many client having problem ?

Corrupt definitions prevent Endpoint Protection clients from receiving updates

I tried to enable Sylink debugging , but ia faced problem with editing Registry values , Even I Stopped Symantec .

You need to disabled tamper Protection.

Actually all clients affected .

Please check below articles if help you.

http://www.symantec.com/docs/TECH166923

James007

I tried to update SEPM through live update and manually through .jdb files .

May be issue Corrupt definitions issue you can follow above articles and update SEPM through Live update.

Please post the sylink.log file.

Disable tamper protection first

If all clients are affected problem is most probably at SEPM side, reboot the server or at least repair the SEPM console. 

I cant find sylink.log file. on my clients .

Chetan Savade

I just Restarted The SEPM machine . and ran the update content command , and the status is completed .

But Clients does not update virus definitions .

Should be at C:\

You have specified the path for Sylink log during the reigistry edit as per above

http://www.symantec.com/business/support/index?page=content&id=TECH104758

Brɨan

l Enabled sylink debugging for one affected client . (AN-Ali   PC).

And the attached file is the Sylink log file .

Attachment(s)

Sylink log_1.txt   583 KB 1 version

02/11 14:37:05.994 [3500] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type.  This content is not supported on this endpoint.
02/11 14:37:05.994 [3500] <PostEvent>going to post event=EVENT_SERVER_ONLINE

Does have you follow below articles ? Does SEPM server client are updated ?

Please check windows firewall should be disabled ?

You can follow below articles in SEPM server.

Corrupt definitions prevent Endpoint Protection clients from receiving updates

James007

SEPM server client is updated

windows firewall disabled

- I follow the above article ..  and i Reach to this screen when I try to  launch a LiveUpdate from Admin > Server > Local Site > Download LiveUpdate content

If you run symhelp on the affected client, does it present any errors?

Download the Symantec Help (SymHelp) diagnostic tool to detect Symantec product issues

http://www.symantec.com/docs/TECH170752

Brɨan

Do you see green dot on the SEP client GUI and in the SEPM console as well? Do they have same policy number?

When this issue occurred? What's the SEPM server operating system?

Have you tried this article  http://www.symantec.com/docs/TECH102934?

No Green dot either in client or server ..

I am new system admin here . and face disconnectivity between server and clients at all .

i run the management server configuration wizard .

I fix the connectivity problem .

But still now SEPM can not update clients , although SEPM can restart, scan,and update policy for clients .

Can you try replacing the sylink on one affected client?

How do I replace the client-server communications file on the client computer?

On the SEPM, is the SEPm service started and running?

You mean now all the clients have green dot & same policy number?

The Server OS is Windows Server 2012 over Virtual Machine (Vsphere Esx)

I tried replacing Sylink

try this

In the console, click Clients.
Under Clients, click the group that you want.
On the Policies tab, under Location-independent Policies and Settings, under Settings, click Communication Settings.
In the Communication Settings dialog box, under Download Randomization, UNcheck Enable randomization.

Click OK.

update the policyon client and upload a new sylink,

are you able telnet port 8014 ?

Chetan Savade

NO

My clients have the green dot just if I go physiclly and update it , but it is not go green via SEPM..

James007

Yes , 8014 is opened .

Please verify does SEPM server SEP client showing online and updated latest defination ?

James007

Yes , SEPM Server showing health state if it is online or not correctly .

and of course all my previous trys were on online clients .

Are you sure windows firewall is turned off? 

Server 2008 uses a profile based approach to the firewall settings. Again, use the netsh command but you will need to specify profile you want to configure (or disable in this case):

netsh advfirewall set <profile> state off 

Values for <profile> are as follows:

allprofiles - change the settings for all the profiles.
currentprofile - change the setting for just the current profile.
domainprofile - change the settings for the domain profile.
privateprofile - change the settings for the private profile.
publicprofile - change the settings for the public profile.

If SEPM and its associated processes (Tomcat, IIS, etc..) are the only applications on this server, we recommend using the "allprofiles" profile for the command line; otherwise choose the appropriate profile.

Chetan Savade

Not all my clients have the same policy number ..

Chetan Savade

Rafeeq

I did every thing 

1- UNcheck Enable randomization .

2- Run netsh advfirewall set allprofiles state off 

3-  follow all articles

but SEPM still can not update clients definitions 

I dont if this error related to my Issue !!!!

But when i try to open Virus and Spyware Protection policy - 

Error appeared 

java.lang.nullpointerexception 

Hello,

I suggest you can contact to symantec support for quick solution.

How to create a new case in MySymantec (formerly MySupport)

Phone numbers to contact Tech Support:-

Regional Support Telephone Numbers:

• United States: https://support.broadcom.com (407-357-7600 from outside the United States)
• Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
• United Kingdom: +44 (0) 870 606 6000

Additional contact numbers: http://www.symantec.com/business/support/contact_t...

Are you using SQL database.If so check the DB table size and increase if needed using SQL team.

Table name:FG_CONTENT

Finally It is working fine now after disable GUP option in Live update policy 

Glad to know it's working.  

Wow great!!!!!