Some of our workstations recieved the the updated version of the SONAR definitions on February 14th and some did not. The ones that did receive the update are showing SONAR as "Not Installed" as well as a few other as you can see in the attachment.

The only solution I have been able to find is to remove the client from the workstation and then reinstall SEP. This brings the SONAR definitions back to a previous version. Is there a way to revert these back without this process or is there a fix to make the update work properly?

Hi ,

Try creating a test policy and move some problem machines to test group and assign this newly created policy reboot the machines and check .

For me this looks like the policy for Sonar is not taking into affect on few machines .

Try this:-

SONAR Definitions are not updated on SEP 12.1 Clients.

http://www.symantec.com/business/support/index?page=content&id=TECH178125

This looks like it could help. I also just realized something that I should have remembered. We haven't finished moving over all of our windows 7 32bit systems to SEP 12.1 yet because when they get updated they blue screen on the reboot so we are having to update them one at a time and then letting them blue screen and then going in and disabling a hidden component in the device manager. So I'm not positive yet, but the ones that are having this issue might be the ones still using SEP 11.