Endpoint Protection

Dear All,

Thanks for the advice my issue is being resolved but now i am facing new issue that is the threatcon level is showing level even thogh the clients and SEPM both are updated.

Thnx in advance

Hello,

Could you please let us know - 

1) What OS are you running on the SEPM server?

2) Were there any changes made on the server like firewall, proxy, etc?

3) Are the clients able to communicate with SEPM server?

4) What happens if you run the Liveupdate from the SEPM console?

As per the screenshot, what I see is SEPM is updated, however the clients are not updated.

To know the Latest Definitions - http://www.symantec.com/security_response/definitions.jsp

Troubleshooting Articles:

1) Symantec Endpoint Protection Manager 12.1 Communication Troubleshooting

http://www.symantec.com/docs/TECH160964

2) Troubleshooting communication problems between the management server and the client

http://www.symantec.com/docs/HOWTO55017

Secondly, could you please upload the sylink.log from 1 of the client machines which is not updating.

To collect the sylink.log, http://www.symantec.com/docs/TECH104758

Hope that helps!!

Log into the SEPM Console and navigate to > Policies > LiveUpdate > Add a LiveUpdate Settings Policy

 Select Server Settings Menu Option and then these options should be checked

                - Use the default management server (recommended)

and assign to the groups.

Could you try the following:-

1. Log into the SEPM Console
2. Click the Preferences link In the  Security Status section on the SEPM Home tab
3. Select the Logs and Reports tab
4. Select DDMMYY from the Date format combo box
5. Click the OK button to close the Preferences page
6. The changes to these settings may take a few minutes to take effect.

FYI

https://www-secure.symantec.com/connect/forums/how-change-date-format-sepm-121

Agree with Pete. You can add the live update policy and assign to all groups. If already assigned then share the snapshot of the setting of live update.

Hi Matinjamir,

You should check two things

1) Make sure clients & SEPM have same policy serial number

Also you can check these settings as well

Log into the SEPM Console and navigate to > Policies > LiveUpdate > Check assigned existing LiveUpdate Settings Policy

Make sure use the default management server is selected 

2) If you are using SEP 12.1 (12.1.671.4971). You can follow the steps to make sure security status is displayed correctly.

1. Log into the SEPM Console
2. Click the Preferences link In the  Security Status section on the SEPM Home tab
3. Select the Logs and Reports tab
4. Select DDMMYY from the Date format combo box
5. Click the OK button to close the Preferences page
6. The changes to these settings may take a few minutes to take effect.

If above two points are corrctly set, share screenshot for "Show liveupdate downloads"