Endpoint Protection

 View Only
  • 1.  SEPM's virus and spyware definitions not updated therefore clients are also not updated

    Posted Jun 22, 2009 03:45 AM
    I noticed that my client's virus definitions are almost a 1 week old (June 16, 2009).  The current definitions on Symantec's website is June 21, 2009.   On SEPM, I went to [Admin - Servers - Show LiveUpdate Downloads] and confirmed that the definitions are a bit outdated.

    I initiated a manual download by going to [Download LiveUpdate Content - Download] but nothing happens.  The status shows:

    A scheduled LiveUpdate™ session is running. You cannot run another LiveUpdate session at this time. [Site: My Site] [Server: {server name}]
    Download started. [Site: My Site] [Server:{server name}]

    How can I update my SEPM's definitions so my clients can also be updated?  Thanks in advance.



  • 2.  RE: SEPM's virus and spyware definitions not updated therefore clients are also not updated

    Broadcom Employee
    Posted Jun 22, 2009 04:27 AM
    use the jdb ifile on SEPM, follow the steps in the KB to update SEPM

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100820002048

    th emessage you git was becuase luall.exe is already in progress.

    cheers
    Pete


  • 3.  RE: SEPM's virus and spyware definitions not updated therefore clients are also not updated

    Posted Jun 22, 2009 10:50 AM
    Hi Pete, thank you very much for this workaround.  I've downloaded the jdb file and applied the update to SEPM.  Now, my clients are getting the latest virus definition files.  This is just a temporary fix because I downloaded and applied the definitions manually.  I think SEPM should automatically check for updates every 4 hours.  How can I make SEPM work like it used to?  It should automatically get the updates by itself.


  • 4.  RE: SEPM's virus and spyware definitions not updated therefore clients are also not updated

    Posted Jun 22, 2009 11:20 AM
    It looks that there is some issue with Liveupdate on this server..like Locked files or corrupt configuration file for liveupdate
    Follow this document to re-install and re-register liveupdate with the Manager

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100907303548 


  • 5.  RE: SEPM's virus and spyware definitions not updated therefore clients are also not updated

    Posted Jun 22, 2009 08:49 PM
    Vikram, there seems to be a problem with the link you posted.  Is this the link you want to send me?
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100907303548


  • 6.  RE: SEPM's virus and spyware definitions not updated therefore clients are also not updated

    Broadcom Employee
    Posted Jun 23, 2009 04:29 AM
    paste the log.liveupdate to know the reason for wshowing this message.

    is this only related to virsu definition for 32 bit?

    are the other definitions NTP/PTP updated?

    or

    copy the inetpub content for the virusdefinition to another drive, restart the SEPM service. enable the liveupdate and let know if the SEPm shows the lateste definition.

    cheers
    Pete



  • 7.  RE: SEPM's virus and spyware definitions not updated therefore clients are also not updated

    Posted Jun 23, 2009 05:21 AM
    I followed the instructions in the link and LiveUpdate seems to be working again.  When I run [Download LiveUpdate Content - Download], I get the results below.

    LiveUpdate succeeded. [Site: My Site]
    LUALL.EXE finished running. [Site: My Site]
    There were no new content updates. Return code = 1. [Site: My Site]
    LUALL.EXE has been launched. [Site: My Site]
    Download started. [Site: My Site]

    However, when go to [Show LiveUpdate Downloads], it still shows old virus and spyware definition dates.  I think I'm really close to getting it work as it should but I still need your help guys.  Thanks.



  • 8.  RE: SEPM's virus and spyware definitions not updated therefore clients are also not updated
    Best Answer

    Posted Jun 23, 2009 05:58 AM
    Pete_4u2002, thank you very much for the troubleshooting steps.  I checked log.liveupdate and found this line, "Only the LiveUpdate command lines were registered in the Product.Inventory.LiveUpdate file."

    When I saw this I registered SEPM again with LiveUpdate by running lucatalog.exe - update.  It took about 5 minutes to complete the registration.  Then I manually downloaded the updates through [Download LiveUpdate Content - Download].  It finally worked!  I'm now expecting LiveUpdate to get the latest definitions next time it goes online to check.  I couldn't have fixed this without your help. Thank you very much. =)