Endpoint Protection

Hi there,

I am running SEP 11.0 MR3 on Windows 2003 Sp2 on 4 sites.

we have 4 main branches and I have a site for each main branches. All sites replicates to the main site in our Head office.

Virus definition is replicating fine between the site but the intrusion prevention signature distribution is not replicating properly to the main Head office site.

If I check each site individually I can see that the Intrution prevention signature distribution is correct. I am only replication logs from the 3 sites to the main site only. packages are not replicated since each site has internet connection.

I also see from time to time an error like
Database logs have been swept Client activity logs have been swept .
Invalid log invalid hash
Not sure at this point why?

I noticed also that old logs are not cleared. If I check the security status details in the SEPM of Head Office The information are not 100% accurate. like you can see that clients have old definition updates but in fact if you check phisically they are updated. Weird!!!

Any suggestions?

Thanks

Hani,

hi,

if the system (SEPM) connected tointernet, do not replicate the definitions.

Database logs have been swept Client activity logs have been swept .: this is DB maintainance, DB is clearing the logs which are above configured dates9 ex if you keep logs for 15 days, the 16rth day's logs are swept). This is normal

Upgrade the servers to MR 4 MP2 as this hax fix for some replication issues.

cheers
Pete

Hi pete,.

Thanks for replying, Actually the logs are not cleared 100%. like I mentionned. My principal concern is the replication as we want to have all logs viewed from the main office. I will plan the upgrade.

Thanks,

Hani,

The invalid og record invalid hash error has been taken care in MR4
I think an upgrade to MR4 or above should definitely help you

Yes I am thinking of upgrading ASAP. The question is can I upgrade the sites only and do the clients progressivelly later? Will the clients still be able to connect properly to the upgraded sites running MR4 MP2?

Thanks,