Endpoint Protection

 View Only
  • 1.  Intrusion Prevention Signature Failures

    Posted Oct 29, 2009 12:13 AM
    SEPM showing error for one PC

     "Intrusion Prevention Signature Failures"   how to resolve this problem.



  • 2.  RE: Intrusion Prevention Signature Failures

    Broadcom Employee
    Posted Oct 29, 2009 12:20 AM
    where do you see this error?

    can you briefly explain the situation you receive the message?


  • 3.  RE: Intrusion Prevention Signature Failures

    Posted Oct 29, 2009 12:32 AM
    Try to repair the client from add or remove program...
     


  • 4.  RE: Intrusion Prevention Signature Failures

    Posted Oct 29, 2009 12:44 AM
    I see this error in SEPM console under Security status tab please check the attached print screen.      SEPM error.jpg


  • 5.  RE: Intrusion Prevention Signature Failures

    Broadcom Employee
    Posted Oct 29, 2009 12:51 AM
    from the screen shot,  it looks like the IPS signature are old, hence failure.

    Since there are 6 systems and 1 system is running out of date, hence ratio is 1:6 i.e. 17 % ( which is above the set paramater , 10%). Hence failure information.

    You may need to update the client IPS signature.


  • 6.  RE: Intrusion Prevention Signature Failures

    Posted Oct 29, 2009 12:54 AM
    Can you let us know the features of endpoint installed on this client machine. Also the version of SEP installed. You can also try a repair of the endpoint installation through add/remove program repair option


  • 7.  RE: Intrusion Prevention Signature Failures

    Posted Oct 29, 2009 01:13 AM
    how can i update client IPS signature


  • 8.  RE: Intrusion Prevention Signature Failures

    Posted Oct 29, 2009 01:28 AM
    i installed all feature on this machine.


  • 9.  RE: Intrusion Prevention Signature Failures

    Broadcom Employee
    Posted Oct 29, 2009 01:45 AM
    if the LU is enabled on client , click liveupdate so that it can connect symantec liveupdate and signatures are updated


  • 10.  RE: Intrusion Prevention Signature Failures

    Posted Oct 29, 2009 02:51 AM

    You should check when the client last check in with the SEPM.  From the SEPM console, click on Client and then select the group that the machine belongs to and then select Client Status from the drop-down box on top.  It could be that the user is on leave or the machine is a spare one and it is not switched on.  It could also be that there is some communication problem between the client and the manager.



  • 11.  RE: Intrusion Prevention Signature Failures

    Posted Oct 29, 2009 02:59 AM
    Try this on that client, if its not getting updated after running a live update
    https://www-secure.symantec.com/connect/articles/how-clear-corrupt-virus-definitions-sepm