Endpoint Protection

A problem was discovered a couple weeks ago that our SAV clients are not getting up-to-date virus definitions from the parent server. 

My organization has a mixture of clients running XP x32, XP x64, Vista Enterprise x32, Vista Enterprise x64, Server 2003.  Our parent server is a Windows Server 2003, SP2 system, running SAV Server Corporate Edition 10.1.8.8000.  The primary server is configured to receive it's virus definition files, on a daily basis, from the host address - ftp.symantec.com, and remote folder - /public/english_us_canada/antivirus_definitions/symantec_antivirus_corp.

A couple weeks ago we noticed that our clients were not getting current definition files.  Everything was working fine up until that point.

I use SSC 10.1.8.8000 to administer the clients.  In the past I have been able to right-click on a client and Update Virus Definitions Now, and after a few minutes I would do a refresh and the definition files would be updated.  I typically had to do this for my Vista x64 and XP x64 systems because for some reason they would not automatically update.  But now I am not even able to get my 64-bit systems updated using this method.  I right-click on the client, select All Tasks/Symantec Antivirus/Update Virus Definitions Now.  I get the prompt that says I am about to updae the definitions on the selected client and click Yes.  A message comes back saying that SAV started a definition file download on the client and I must refresh the console view before I can see if the definitions were updated on the client.  A couple of weeks ago, this worked fine, now it doesn't.

Over the past two weeks we have downloaded the current xdb files from http://definitions.symantec.com/defs/xdb, to the Program Files\SAV folder on the parent server and then stopped and restarted the Symantec Settings Manager service and this seemed to work and update all of the XP x32, Vista x32 and Server 2003 clients, but not the XP x64 and Vista x64 clients.

If anyone has any suggestions that might help me resolve this issue that would be great.

Thanks so much

Lawrin Walker

Definitions might have become corrupted on SAV server call Symantec support and get Rx4Defs toold and run it on the server.

For the 64 bit clients
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2006010609164848 

Thanks you for the response.  I have looked at the article for the 64-Bit clients and have adjusted the settings.  Hopefully tomorrow, they will be updated.  I have a call into Symantec suppport and will hopefully have the tool soon to try and fix the corruption.

I had thought about removing the software from the server and trying to reinstall, but I was not sure what that would do to my clients, and I was afraid that if I started the removal and something went wrong, I might not be able to get it reinstalled.  So I was hopeful that someone would see my post and give me some alternatives.  Hopefully I will be able to acquire the tool and hopefully it will work.

Once I am able to test this I will repost to this link to update on the status.

Thanks again,
Lawrin