Suddenly SEP clients stop reporting their status in a proper way (i.e. virus definition, Firewall/Auto-protect status are incorrect whereas Last Check-in value is properly updated).
No error in any logs.
There is a GPO applied to these clients which is monitoring "Symantec Antivirus" service (rtvscan.exe). The latter is then not able to report correct information to the main SEP process (smc.exe) which is in charge of status reporting.
Remove impacting GPO then restart client machines.
SEP 11.0.6 RU6 MP3 installed on Windows XP SP2/SP3.
Imported Document ID: TECH162477
Subscribing will provide email updates when this Article is updated. Login is required.