SEPM 12.1 not updating client definitions

[Migration User]

Hi,

i have SEPM 12.1 installed on Win 2008 R2 64Bit server with SQL 2005 SP3 DB, it downloads definitions daily but the home page doesn't update the definition dates, and in turn the clients never update it was working fine until last week.

any help will be appreciated

[pete]

Hope the client gets the update from SEPM?

can you open the SEPM console and click on admin , Server & on site properties check the LU downloads, it should reflect the latest date and revision.

[Migration User]

they do update from SEPM, the last LU session ran at 8:13 AM today

[pete]

can you restart the DB and the SEPM service to see if it reflects the right one.

[Migration User]

ive already done that and changed SQL authentication with now luck

[Mithun Sanghavi]

Hello, 

You said this was working till Last week.

So, what changes did you make on the machine during the week which you think may have got the issue to occur??

Could you upload the .jdb file on the SEPM version 12.1 and check if that helps:

You can Download the .jdb file from the Link below:

http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce

 

 

 

and follow the document provided below:

Update definitions for Symantec Endpoint Protection Manager using a JDB file

 

Let us know if that helps!!

[Migration User]

thanks for the tip but that didnt work either, I've also tried to update the LU catalog with no luck

but here's the odd thing here:- the NTP, and PTP/SONAR def's are updated but not the AV and Spyware def's.

[SMLatCST]

...the defs that get downloaded by the SEPM have there?  You can check this by going to Admin -> Servers -> Select your site -> Edit Site Properties -> LiveUpdate tab, then hit the 'Change Selection' button under the "Content Types to Download" section of the screen.

Is everything here ticked?

[Migration User]

no changes have been made to download content so everything is ticked i've just double checked now

the AV def's are stuck 09/09/2011

[Rafeeq]

try this

http://www.symantec.com/business/support/index?page=content&id=TECH104721

[Migration User]

i tried this earlier and it didnt work, also did secars test to make sure comms are fine,

[SMLatCST]

...can you get us a screenie of the "Show LiveUpdate Downloads" window from the SEPM please?

I'd also recommend taking a look at the LiveUpdate logs on your server, these are usually located in C:\ProgramData\Symantec\LiveUpdate, and is called log.liveupdate.

[Rafeeq]

open sepm

servers

click on local site

at the bottom u wil find show liveupdate downloads.

[Migration User]

all the live update logs are fine and the content is up to date and downloaded correctly the only problem is that SEPM doesnt display the correct definitions on the home screen, and its not applying the correct AV def's to clients but all NTP and PTP def's are downloaded and distributed correctly. as per my screenshot in the first post

[Migration User]

ok I've taken a screenshot of LU status and everything is up to date

[Rafeeq]

The manager version display is for AV definnitions only,

if u see the screen shot 

the av defs are of 9/9..thats why the manager screen is not getting populated.

did u clean out the defs and try downloading again?

as per this document

 

http://www.symantec.com/business/support/index?page=content&id=TECH104721

 

[Migration User]

well ive cleaned up all the def's but it says no updates available

[Rafeeq]

please try these steps

 

To register SEPM with LiveUpdate:

1. Click Start, then Run.
2. Type cmd, then click OK. This will bring up a command prompt.
3. At the command prompt type cd and the path to lucatalog.exe. By default the command would be: 
   
   cd C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
    
4. Type lucatalog.exe -cleanup
5. wait for 5 mins
6. lucatlog.exe -update
7. run liveudpate now.

[Migration User]

thanks for that but i still get the same result, no updates found

[Rafeeq]

did u do a repair of sepm from add/remove programs?

what dates do u see in the downloads section now?

do u use proxy? firewall?

http://service1.symantec.com/SUPPORT/sharedtech.nsf/d3c44a1678bd8f45852566aa005902cb/c0aeb869920b38b688256d980074e389?OpenDocument&prod=Symantec%20AntiVirus%20Corporate%20Edition&ver=10.0&src=ent&pcode=sav_ce&dtype=corp&svy=&prev=&miniver=sav_ce_10

[pete]

pass on the log.liveupdate from sepm!

[Migration User]

rafeeq- ive done that 3 times already and nothing even ran the config wizard and reinstalled LU

pete- ive attached the LU log, also i see it has downloaded the new defs but just doenst apply them

[Migration User]

here is the log

Attachment(s)

Liveupdat.txt   34 KB 1 version

[SMLatCST]

...of the SymcData\spcVirDef64 folder seems to be missing the newdefs-trigger subfolder and the trigger.dat file?

Is newdefs-trigger\trigger.dat present in any of the other subfolders of SymcData?

[Migration User]

Please Install the Certificate from the SEPM WebConsole on the SEPM and restart the SEPM Service maybe Reboot.

I've had a similar Problem and managed that 1 with this. maybe HDD full or DB greater than 20DB (only embedded)

[Migration User]

well guys thanks for all your help

I uninstalled SEPM( didn't uninstall the SQL DB) reboot, install SEPM, import certificate and ran live update and now everything working all the clients are re-registering on the new SEPM a bit of an extreme fix but it worked