Endpoint Protection clients stopped updating the definitions
Last Updated June 06, 2018
After migrating to or installing SEP 12.1 with the embedded database, clients eventually stop updating the definitions from the Manager. However, SEPM correctly downloads the newest definitions. Additionally the Symantec Endpoint Protection Manager (SEPM) may display incorrect definitions status on the clients even after the clients were manually updated via Intelligent Updater file or LiveUpdate.
After a restart of Symantec Endpoint Protection Manager service, SEP clients are able to get the newest definitions and their status gets updated in the manager.
SEP clients remains connected to the SEPM, they show green dots and show the server IP or Name in the SEP interface (Troubleshooting)
SEPM does not process the newly update definitions since the day of upgrade:
In PackagePublisherTask-0.log there are no more updates since the day of upgrade (entries are few days old - they should be from 2012-01-10):
01/10 08:28:36.078  <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
01/10 08:28:36.078  <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
01/10 08:28:36.078  <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
01/10 08:28:36.109  <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
Inetpub\Content on SEPM shows more revisions than configured. The numeric folders with the content updated after the day of upgrade contain only full.zip files
The restart of the SEPM service causes:
The old content is deleted from the Inetpub\Content, so there are only as much revisions as configured in the SEPM.
The full.zip files are extracted in every revision folder.
SEPM starts to publish the newest updates.
Clients can find them and update the definitions.
At the next download of the definitions by SEPM the problem reappears (SEPM doesn't process the new updates, doesn't publish them, exceeds the number of the revisions, doesn't extract full.zip in the newest content, SEP clients cannot get the updates)
The Sybase JDBC driver does not support query time out
This issue has been fixed in Symantec Endpoint Protection 12 Release Update 2 (RU2). For information on how to obtain the latest build of Symantec Endpoint Protection, read
TECH199676: Obtaining an upgrade or update for Symantec Endpoint Protection or Symantec Network Access Control
Symantec Endpoint Protection Manager 12.1 with Embedded DB