Endpoint Protection

 View Only
  • 1.  Proactive Threat Protection defs not updating

    Posted Nov 20, 2009 09:57 AM
    11.0.4202 is running on my PC and I noticed that my proactive threat defs are not updating. How can I fix this?

    Also, how do I know that other computers on my network are not having the same issue? When I look in the manager console I don't see a way to verify that all the clients on my network have the latest proactive threat defs. Is there a way to monitor this? When I pull up the Truscan threat protection distribution page it has no data in it.


  • 2.  RE: Proactive Threat Protection defs not updating
    Best Answer

    Posted Nov 20, 2009 10:33 AM

    Title: 'Proactive Threat Protection does not update after installation of Symantec Endpoint Protection.'
    Document ID: 2007101515304948
    > Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2007101515304948?Open&seg=ent



    Title: 'Proactive Threat Protection is not enabled or is waiting for update'
    Document ID: 2009090115185248
    > Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009090115185248?Open&seg=ent


    How to check the PTP update in SEPM

    1. Login to SEPM and click on Reports

    2. click Computer Status from the drop down

    3. click Protection Content Versions from the next list. (and if you specify a client you will get that client's information)

     

    From the client option includes.

    Clients: right-click a client and choose 'Edit Properties' then select the Clients tab for content update information including "Current TruScan Definitions".



  • 3.  RE: Proactive Threat Protection defs not updating

    Posted Jan 26, 2010 09:00 AM
    Hello,

    I have an issue that not all clients are updated with the latest proactive threat definitions (currently it should be 2010-01-25 rev. 019 for proactive threat).
    We use a variety of SEP 11 MR4 and MR5 clients (not all are already updated to MR5), and the problem also existed with MR4 only. My installation partner told me that an upgrade to MR5 would solve the issue, but even MR5 (11.0.5002.333) clients are not always updated with the latest proactive threat definition.
    From the 296 clients we have (today):
    * 140 clients with version 2010-01-25 rev.019 (= latest).
    * 101 clients with version 2009-12-31 rev.020

    Most users reboot their client every day (shutdown at end of working day), but this does not help.
    We have a mix of Win2000 (SP4) and WinXP (SP2 and SP3) clients, but the issue is not related to 1 version. For example: my machine (Win XP SP3) had the version 2009-12-31 rev.020. After rebooting the version of proactive threat stayed the same (there are no erros in the event viewer of the machine).
    The next day (today) it still was the same version. In the afternoon I DISABLED my network card and after 5 seconds I enabled my network card again. And (only then) the proactive threat definition was updated to the latest version.