SEP 11.0.5 Product updates - how can I tell if it is working?

[Wally]

I'm running SEP 11.0.5002.333 and have some unmanaged clients that use manual LiveUpdate to retrieve AV updates and product updates directly from Symantec using the Internet.

On the unmanaged client, is there a way to tell if the product updates are being installed?   The manual LiveUpdate session reports downloading and installing product updates, but I want to know if the actual product updates are logged somewhere on the client.  

I've looked in all of the logs - but there doesn't appear to be a log for product updates that is similar to the log for AV updates.

The unmanaged client is set to EnableProductUpdates in the registry.

HKEY LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\LiveUpdate\EnableProductUpdates is set to 1.

I'm trying to find out what product updates are being installed on the client using the client UI or any other means and without using SEPM.

Thanks...

 

 

[Migration User]

Hi,

There aren't too many product updates that get sent out, once every few months it seems. There are two places I can think of that you might get what you want:

-Click View Logs on the left

-Beside Client Management click View Logs > System Logs...

-New engines and what not show the version loaded in there

 

You can also get info by doing the following:

-Click Help & Support in the top right

-Click Troubleshooting

-Select Versions on the left

Here you can see at least the versions of each component, I am not so sure we will log any data in any other accessible location.

[Wally]

It seems like I get updates more frequently than that, so I'm trying to figure out if the client is really updating itself.   It may just be my imagination, but it seems that there are always 2 product updates downloaded and installed when I watch the manual LiveUpdate session execute.

The unmanaged client was installed from the CD1 directory.    As I stated in my previous post, LiveUpdate reports that it downloaded and installed 2 product updates.  I'm just trying to figure out if it's really working or not.   The registry entry(s) appear correct to allow product updating.

I'll follow your suggestion.   If you can think of anywhere else I can look - registry, etc., let me know.

How can I get a list of the current versions of each component that I can cross check with my client to see if it is current?  This is SEP 11.0.5002.333...

Thanks

[Migration User]

Latest version of SEP is 11.0.6100.I think it is better to download manually from https://fileconnect.symantec.com and do an upgrade...

[Migration User]

Hello....

 

You can check the Latest Definition Update by opening the Symantec Endpoint Protection User Interface & Check Status  you will find 3 Components as below:

Antivirus & Antispyware Protection

True Proactive Protection

Network Threat Protection

below each of this component you will find Definition of each Component.

The this is regards to AV is working OR not?

You can check this by clicking Option tab---> View File System AutoProtect Statistics next to Antivirus & Antispyware Protection on the Symantec Endpoint Protection Status Window.

 

For any clarifications pls, revert Back.

[Wally]

Hi Hemant Koli,

The question is "How can I tell if product updates are being istalled?", not definition updates.   You are correct in that definition update versions are displayed in the client UI.   Definition updates are working correctly on the client.   I'm trying to determine if product updates - updates to the program components - are working.    I'm sure you are aware that LiveUpdate for SEP distributes both definition updates and product updates unlike SAV CE LiveUpdate which distributes only definition updates.

So - in the SEP client UI, it is easy to see the definition date and version.   However, I'm trying to find the component date and version to see if product updates are being installed.   This is on an unmanaged client.

Regards,

Wally

 

[Wally]

Aravid,

 

Symantec publishes software updates for SEP - like scan engine updates, minor fixes,  etc. - via LiveUpdate.   I'm trying to determine exactly what is being updated when an unmanaged client executes a manual LiveUpdate and LiveUpdate reports product update(s) downloaded/installed.

What you are suggesting is a version upgrade which is not the question.

Thanks,

Wally

 

[Rafeeq]

on unmanaged client i dont think product updates will be installed

if u have a sep version 11.0.4..it will never get updated to 11.0.6 automatically 

since liveupdate is same for sepm and also sep..these setting should be referring to the manager

[Wally]

Rafeek,

 

I'm not asking about version updates like from 11.0.4 to 11.0.6.  Those are release upgrades and have to be downloaded from fileconnect.  I'm asking about product updates - engine updates, bug fixes, etc. - for the currently installed product.   I know that LiveUpdate is downloading and installing these on my unmanaged client.  I can see the messages when manual LiveUpdate runs.   However, the LiveUpdate message is not very specific - it just says 1 product update downloaded, 1 product update installed.   I'm trying to find out exactly what is being updated.    Information for the definitions updates is easy to find - the version date and version number is clearly visable in the client UI.  Apparently, information for the product updates is not readily viewable.   There should be a log - LiveUpdate or otherwise - that should show what is being downloaded and updated.  So far, I haven't been able to find the log.

In SCS and SAV CE, fixes and engine updates are published in maintenance releases and maintenance patches that are downloaded from fileconnect and manually installed.   In SEP, fixes and engine updates are distributed by LiveUpdate as product updates along with content updates (virus definitions).  I'm trying to find out exactly what is being updated when manual LiveUpdate reports that it has downloaded and installed one or more product updates.

 

Thanks,

Wally

[Migration User]

In the SEP client: Help & Support > Troubleshooting > Versions will show engine versions, etc.

The Release Notes for SEP should have product engine versions as of the release of specific builds.

http://www.symantec.com/docs/tech103087

I believe that unmanaged clients do get product updates via LiveUpdate (i.e. version updates), but patches delivered via LiveUpdate are not released simultaneous to the actual release of, say, the DVD to Fileconnect.

sandra

Edit to add: Whoops, sorry, missed that info being in the previous comment :)

[Wally]

John,

I think you have the best practical answer although I'm not sure that I'll be able to find out exactly what program updates LiveUpdate is distributing.    One thought is to look in the LiveUpdate log -- I should have thought of that first.

Anyway, I'm giving you credit for the solution because you correctly identified that I was asking about product updates, not version updates.

It would be nice if Symantec would log the product updates somewhere.   Maybe in the UI like the content updates.   At least with SAV CE you could see the MR and MP release numbers.

Regards,

Wally

[Wally]

Sandra,

Thanks for your reply and the link to the documentation.   Yes, manual LiveUpdate reports that it downloads and installs product updates (fixes, engine upgrades, etc.) during of the manual LiveUpdate, but it doesn't give specifics.   And, apparently what it actually updates isn't logged like content updates (virus defs) or as easy to find.   That would be a nice product enhancement.   To the best of my knowledge, (and I could be wrong) I don't think the minor release number changes as updates are installed.  I'm at 11.0.5002.333. 

According to the SEP documentation and what I've seen on the knowledge base, release upgrades (ex. from 11.0.5 to 11.0.6) have to be downloaded from fileconnect.

I'll compare the version numbers for 11.0.5 from the doc you pointed me to with my unmanaged client.

Thanks,

Wally

[Migration User]

Hello Wally...

 

You can try this to find the Engine Versions & etc....

Open SEP user Interface & Click Help & Support---->Troubleshooting & on the Troubleshooting window you will find Versions on Left Panel.

For more informations pls, find Attached Screenshot.

[Wally]

Hermant,

 

Thanks for the screen shot but I don't think it has enough detail.  I think I'm going to have to go through the LiveUpdate log to find out what is being updated.

Regards,

Wally