Symantec Endpoint Protection Manager 12.1 is not updating 32-bit or 64-bit virus definitions

Method 1:Check if Disk space is not running out of space, if so try to increase the disk space as while downloading and installing virus definitions  sufficient disk space is required 
Method 2 :Managed Symantec Endpoint Protection (SEP) clients do not update virus definitions.  These clients are configured to receive their updates from their Symantec Endpoint Protection Manager (SEPM).
The SEPM shows old virus definitions in "Admin > Server > Local Site >Show LiveUpdate Downloads".

SEPM 12.1
WIndows 2003 SP2 32-bit
Windows Server 2008 R2 64-bit

SEP clients Windows XP, Windows 7.


There are several possible causes.  Examine the SEPM's log.liveupdate and the System > Server Activity logs may provide details on the nature of the failure.
One possible cause is that old or corrupted virus definitions present on the SEPM prevent the SEPM's ability to update the SEP clients with new virus definitions.

To clear old or corrupted virus definitions from the SEPM:
1. Delete the content of folder "C:\Users\All users\Symantec\LiveUpdate\Downloads\"
Note: Application Data is a hidden folder. Delete the content of the Downloads folder, but not the folder itself.
2. Stop the service "Symantec Endpoint Protection Manager".
To stop this service:
  1. Go to Start > Run.
  2. Type the following: Services.msc
  3. Select and stop the above mentioned service
3. Delete the numbered or TMP folders inside the paths:
Note: This step is not necessary 
  • %programfiles%\symantec\symantec endpoint protection manager\inetpub\content\{535CB6A4-...
  • %programfiles%\symantec\symantec endpoint protection manager\inetpub\content\{07B590B3-...
  • %commonprogramfiles%\Symantec Shared\SymcData\spcVirDef32
  • %commonprogramfiles%\Symantec Shared\SymcData\spcVirDef64
Note 1: In Server 2008, the Downloads folder in step 1 is located at %programdata%\Symantec\LIveUpdate\Downloads
Note 2: In 64-bit operating systems the "Symantec\Symantec Endpoint Protection Manager\inetpub\content" folder will be located in C:\Program Files (x86) and not C:\Program Files 
Note 3: For Windows Server 2008 or similar systems the location of the%commonprogramfiles%\Symantec Shared\SymcData\ will be following:C:\ProgramData\Symantec\Definitions\SymcData\
4. Launch the process LUALL.EXE
5. Restart the Symantec Endpoint Protection Manager service when LiveUpdate is complete. 
  1. Log on to Symantec Endpoint Protection Manager Console and launch a LiveUpdate from AdminServer > Local Site Download LiveUpdate content.
  2. Verify the correct download/usage of new virus definitions from "Admin > Server Local Site>Show LiveUpdate Downloads".


Post a Comment

Popular posts from this blog

Java Control Panel Icon "Application Not Found"

The install4j wizard could not find a Java Runtime Environment on your system. Please locate a suitable JRE...

Clients Unable to update - "Cached cookie has expired or new PID is available"