Endpoint Protection

Dear Sir,

I scheduled to start definition update at everyday 18:00 in SEPM. It is avoid our server download and deploy virus definition update and cause any performance degrade issue during working hour. However, i find that the server always start the job on 18:48 or later which is quite far away from the scheduled 18:00 time. (Please check the log file attached) And the job end on 21:00 -22:00 which is too close to our scheduled daily backup job. 

Because we have a large amount of data require to finish backup before office hour, so ther are no any other time-slot to schedule for definition update. Of course it is not possible to schedule earlier or just specific some week day for the definition update.

Is that any possible way to make the definition download start on 18:00 accuracily.

Please help, thanks.

Attachment(s)

Log.zip   285 KB 1 version

When the sechedule is set to daily with the start and end time, it means that the live update will start any time between the start time and the end time. For example, if the start time is 18:00 and the end time is 19:00, then the liveupdate will start anytime between 18:00 and 19:00.

Example schedules:

1)

2)

Note: Beware that setting the schedule without retry interval/window is not recommended as the SEPM will not retry to download the definition on a particular day if it first attempt was a failure.

Reference: http://www.symantec.com/docs/HOWTO54810

Please let us know if you need further help. If your query has been answered, please mark the thread as resolved.

Sorry for the late reply.

Yes, your suggestion seems work for us. But i still have another questions:

I checked the Sesmlu.log inside "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs", i found that the update always have following error on around 2:20-2:30am(This is the Hong Kong time zone which equal to your time zone 18:00pm)

08/25 02:35:26 [1f24:1f94]   ERROR      spcVirDef64 ProductUtil Initialize Tomcat server xml file failed.

It seems live update always met this error and keep on re-try the process until more than one hour later (around 3:40am) to start the normal update process again. It take too long time for we can affortable. Can i fix this?

Thanks for help.

Attachment(s)

SesmLu_4.zip   592 KB 1 version

Hi Seyad,

Do you have any idea for above question?