SyKnApps update is not retrieved/download when running LiveUpdate

[Migration User]

My Proactive Threat Protection last 'shown' update is July 30, 2008 r1.  I researched this on Symantec's website - their solution is (as written): "Run LiveUpdate on the Symantect Endpoint Protection Manager to retrieve the SyKnApps update.  Once an affected SEP client heartbeats, retrieves and processess the SyKnApps update, the PTP definintions will update to September 29, 2008 r16 or later."

I've tried this multiple times, but the 'update' date remains July 30, 2008 r1.  Any suggestions would be appreciated.  Thanks.

[w-d]

Try this document, is very helpful in such problems:

Symantec Endpoint Protection Manager 11.x is not updating 32 or 64 bit virus definitions.
http://www.symantec.com/business/support/index?page=content&id=TECH104721

What is the Symantec Endpoint Protection Manager version you are using?

[w-d]

What is the operating server on the machine? Note that on servers and 64-bit machines not all components are supported and Proactive Threat Protection may not be udpated (truscan is not supported on servers and 64-bit machines, additionally Application and Device Control component is not supported on 64-bit machines)

[Mithun Sanghavi]

Hello,

What version of SEP are you carrying? Please make sure you are carrying the Latest version of SEP.

The Latest version of SEP is 11.0.6300 (RU6 MP3)

In your Case, where the PTP definitions are not updating, perform the steps as below:

 

This procedure needs to be followed on all affected SEP clients

• Modify the value of the following DWORD registry entry to 1:
  HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\LiveUpdate\SyknappsContentListReady
  Note: If this registry entry does not exist on the client, create the entry and set it to the value above

• Reboot the SEP client
  
   

Some possible workarounds that have been found to work in some customer environents are:

• (HKLM\Software\Symantec\Symantec Endpoint Protection\LiveUpdate\SyknappsContentListReady) to 1
• Uninstall and reinstall affected SEP clients
• Configure affected SEP clients to update their definitions via an internal LiveUpdate server or the Public LiveUpdate servers. 

 

 

The "Scan for trojans and worms" and the "Scan for keyloggers" options are currently not supported on Windows server operating systems or 64-bit Windows XP Professional. The "Scan for keyloggers" option is also not supported on Windows 7.

Intrusion Prevention System (IPS) technology is fully compatible with Windows server operating systems, and should be used to protect all servers.

Note: Proactive Threat Protection is not the same thing as IPS. Proactive Threat Protection is not compatible with server operating systems.

In order to enable IPS, you must have the client firewall portion of Symantec Endpoint Protection installed and running. This can seem like a problem if you want to run IPS but do not want to use the firewall. To work around this, withdraw the firewall policy. This ensures that IPS is enabled and protecting your network without forcing you to use the client firewall.

[Chetan Savade]

Hi,

Scan for Trojans and worms policy:

1. Open the Symantec Endpoint Protection Manager
2. Select clients and then the policies tab
3. Select the if inheritance it turned on make sure to select the parent group.
4. If inheritance is not turned on make sure to apply the following changes to all individual groups.
5. Select Antivirus and Antispyware Policy from under the Location-specific Policies menu
6. Select TruScan Proactive Threat Scans from under the Antivirus and Antispyware menu
7. Make sure the Scan for trojans and worms box is checked.

Windows Firewall:

1. Click the Start button and go to the Control Panel. Note: If Control Panel is not listed, go to Settings and open Control Panel.
2. Open Windows Firewall.
3. Select Off then press OK.

Simple File Sharing

1. Open My Computer
2. Select Tools and Folder Options
3. From Folder Options window select the View tab
4. At the bottom of the list there should be a box called (Use Simple File Sharing) uncheck this box