Endpoint Protection

We've had a couple of clients turn up with very old virus definitions that were refusing to update.  The clients are configured to use a GUP and the GUPs are running 12.1 RU5. 

The debug log on the client was filled with many errors like...
Downloaded new content update from Group Update Provider failed.

The logfile on the GUP had the following interesting messages...
GUProxy: not enough memory for 601315392,after geting://<ip address>:8014/content/%7B535CB6A4-441F-4e8a-A897-804CD859100E%7D/150209032/Full.zip
GUProxy: cache file is not on the disk: #content#%7B535CB6A4-441F-4e8a-A897-804CD859100E%7D#150209032#Full!zip

The GUPs  are still updating clients with small incremental updates, but severely out-of-date clients cannot download the full update from the GUP.  This behavior has been confirmed on at least two different GUPs.  

One GUP has 342 MB in the SharedUpdates folder and the other has 2.53 GB.  The policy allots for 5 GB of cache and the MasterClientMaxDiskCache setting on the GUP confirms this with a value of 0x00001388 (5000).  So, I'm not sure why the GUP would reject the file with a "not enough memory" error.

My hope is that this is a known issue that will be corrected in the next release. 

I believe it may be. See this thread:

https://www-secure.symantec.com/connect/forums/gup-error-0

Especially what Steven Kintakas mentions

I have the same problem here.

When occours i move GUP to another group without GUP configuration and clear all defs on sharedupdates.

Hope it helps

Thanks for this.  My searches did not turn this up.

Hi,

SEP 12.1 RU6 is now released and there is a fix to the above mentioned issue.

GUP fails to retrieve content from SEPM with error: “GUProxy - not enough memory”

Fix ID: 3652490

Symptom: The Symantec Endpoint Protection client cannot download the full definition contents (full.zip) when multiple concurrent full.zip downloads are in progress from the Group Update Provider.

Solution: Added support for multiple concurrent full.zip content downloads from the Group Update Provider

Referene: New fixes in Symantec Endpoint Protection 12.1.6

http://www.symantec.com/docs/TECH230558

Upgrade to SEP 12.1 RU6 should resolve this issue.

12.1.6 just released

Symantec Endpoint Protection 12.1.6 Release Notes

http://www.symantec.com/docs/DOC8626

New fixes in Symantec Endpoint Protection 12.1.6

http://www.symantec.com/docs/TECH230558

Yep. This is another defect we reported, and can confirm it was verified as fixed in RU6 Beta2. Plan to re-test all our fixes in the RTM release of RU6 next week.