Revocation Data update errors in SEP (Symantec Endpoint Protection) system log:
"The latest Revocation Data update failed to load. The component will continue to use its previous content."
Whitelisted files may continute to be detected as risks by Download Insight because IronRevocationDefs are not updating; Iron.db is using outdated reputation data.
Symantec Endpoint Protection 12.1 RU6 MP6 or older
Windows operating system
The Iron.db file was failing to update because at some point it became corrupt, and SEP's automatic remediation routine did not correctly repair the file.
This issue has been fixed in SEP 12.1 RU6 MP7
Please upgrade to SEP 12.1 RU6 MP7 to address this issue. Because Iron.db is a protected file, a work-around is difficult without some operation equivalent to an un/re-install or upgrade of the software. Choices are:
1.) upgrade to any newer version of SEP (preferably SEP 12.1 RU6 MP7, so the issue will not recur). 2.) or, un/reinstall current version 3.) or, (least wieldy method) - reboot to safe mode (or disable SEP ccSettings service and reboot), delete Iron.db, re-enable ccSettings, and reboot to normal mode.