A Symantec Endpoint Protection Manager (SEPM) or Symantec Endpoint Protection (SEP) client is running version 12.1 RU2 and updates exclusively from an internal LiveUpdate Administrator 2.x server. This LUA server has been configured for several months to download and make available "Symantec Endpoint Protection 12.1 RU2" materials. Now it is noticed that the affected SEPMs and SEP clients cannot bring their AntiVirus definitions up-to-date. The log.liveupdate or log.lue indicates that no newer files are available, but the LUA event log confirms that new Symantec Endpoint Protection 12.1 RU2 contents are successfully downloaded and distributed daily.
Note: other LUA 2.x servers in the organization are able to download SEP 12.1 RU2 definitions. This issue does not affect all LUA 2.x servers.
The SEPM log.liveupdate contains among its entries:
The following changes occur when the SPC is updated:
The old "Symantec Endpoint Protection 12.1 RU2" becomes renamed "Symantec Endpoint Protection 12.1 RU2 (Beta)". This beta product does not have the current H version of definitions.
A new product "Symantec Endpoint Protection 12.1 RU2" is available to be added ("Add To My Symantec Products"). Once this is added, there will be listings in the LUA server for both it and the beta. This new "Symantec Endpoint Protection 12.1 RU2" does have the necessary H version of definitions.
Administrators should then:
Add the new "Symantec Endpoint Protection 12.1 RU2" product to the LUA server's Distribution Centers. Open the download and distribution tasks and configure these to retrieve and make available "Symantec Endpoint Protection 12.1 RU2" content.
The "Symantec Endpoint Protection v12.1 RU2 (Beta)" may then be deleted.
After this is complete, the LUA 2.x server will be downloading the H version of definitions that the current (non-beta) SEP 12.1 RU2 SEPM and SEP 12.1 RU2 clients require.
Imported Document ID: TECH201363
Subscribing will provide email updates when this Article is updated. Login is required.