Endpoint Protection

hi everyone

i have a problem with clients which they dont receive virus definitions.
or continuous update does not work.
i am searching for a couple of days but i could not fix the problem.

i use symantec endpoint protection version 11.0.4202.75
and also when i search for unmanaged computers it lists all
computers as unknown computers.

i dont know if the clients has lost their connections with management server.
when i click on fix button on the client side
a message says reques sent to the management server
after respond ur problem will be fixed. but nothing change.

anybody can help me about this subject?
thanks in advance

and antivirus definitions stays on 15 april 2009.
luall.exe (c:\program files\symantec\live update\ ) works for some copmuters.
fileserver update symantec when i use luall.
and other computers and users do not have internet access.
i think bcoz of that they can not connect symantec live update server...

Check what is the definition on SEPM Manager..

go to SEPM - Admin- Local Site (highlight) - Show Liveupdate Content

If the definiton for Antivirus 32 bit is 15th april then it means first you need to fix definition problem on SEPM.

go to SEPM - Admin- Local Site (highlight) - Download Liveupdate Content
wait till it finishes then again check the definition date for Antivirus 32 bit..if it doesn't change.

then run LUALL on SEPM and check what error you are receiving..

If SEPM has current definitions then we will have to check the communication between SEPM and SEP clients.

 

As rightly suggested please check the communication between the clients and the SEPM. In case the SEPM has the latest definition and the client is able to communicate with the SEPM it will receive the latest definitions.

Troubleshooting Client Communication with SEPM

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009082701244448

definitions date 31 12 some servers are 32 bit some are 64
and i guess fileserver(local site) dpwnloads both.
under live update content says tuntime error code=4

luall works manually c:\program files\symantec\live update\
on fileserver where sepm is installed and says ur computer is protected no problems detected
also there is green dot on symantec icon on system try.
i think problem is between sepm and sep clients.

SEP and its client stucking in dec 31 2009 is a known issue symantec is working on that .
For more info refer below link
OFFICIAL STATUS: SEPM Definitions stay at 31-12-2009 (LAST UPDATED: 13-JAN-2010) 
For other clients which is having older than this date you can follow the instructions of sandip  

"Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager
http://service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/3b09d4f329acc39fc12573b400341977?OpenDocument 

clients do not shown in the sepm
when i search for unmanaged computers all clients list as unknown computers

I think then the clients are not able to communicate to SEPM
Go to the client and check in help and support--->troubleshooting which is the group it belongs to and whether it is showing the server name/Ip there
Also refer below article
Troubleshooting Client Communication

 

\management\ general information \ server : offline

Symantec Endpoint Protection: Troubleshooting Client/Server Connectivity

All your clients having this problem or only for few? 

all clients having this problem.
there is a setting on sepm saying delete clients after 30 days.
virus definitions are 15 april 2009 on clients.
i guess sepm deleted them after 30 days since they cant get virus definitions.
and i think it is related to policy that clients cant get updates.
i copied sylink from managent server and copied client side (c:\\program files\ symantec\symantec endpoint protection manager)
just replaced.
now i see clients on sepm. also with green dot. i didnt do this all clients. still experiencing this issue.
management server update when using live update but i think it doesnt update automatically.
says return error code 4.
now searcing for that

 Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager

The clients will delete from management server only if they are not able to contact with in 30 days only.

What is the current update available in SEPM.
This you can find from
Admin----->Servers---->local site--->show liveupdate  downloads