Endpoint Protection client is unable to download definitions from Endpoint Protection Manager
search cancel

Endpoint Protection client is unable to download definitions from Endpoint Protection Manager

book

Article ID: 164849

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

Symantec Endpoint Protection (SEP) client repeatedly fails to download specific definitions from the Symantec Endpoint Protection Manager (SEPM).
Client system log contains errors that indicate that Liveupdate is unable to process the suspect definitions.

SEP Client:
System Log-
"A content update package from the management server failed to unzip.  The update will be reattempted."
"New content update failed to download from the management server." 
"Remote file path: ...\\:8014/content/{5A7367E1-D1F6-43b5-BD94-4AFFA896D724}/151028036/Full.zip""

SEPM :
iDeltaThreadPool_1-0 log-
SEVERE: IncDelta error: IncrementalDeltaResult [deltaFilePath=F:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{5A7367E1-D1F6-43b5-BD94-4AFFA896D724}\151028036\xdelta151028036_To_161121023.dax, deltaFileName=xdelta151028036_To_161121023.dax,
 request=IncDeltaRequest @-483862330 iFWDdelta: 151028036->161121023 [incZipOutputPath=...\content\{5A7367E1-D1F6-43b5-BD94-4AFFA896D724}\151028036\xdelta151028036_To_161121023.dax, isOutputAvailable=false, destFullPath=C:\ProgramData\Symantec\Definitions\SymcData\spcPorscheSMRDef\20161121.023, srcFullPath=...\content\{5A7367E1-D1F6-43b5-BD94-4AFFA896D724}\151028036\Full, isForwardDelta=true, tempSrcFullDirPath=...\content\{5A7367E1-D1F6-43b5-BD94-4AFFA896D724}\151028036\Full, tempDstFullDirPath=C:\ProgramData\Symantec\Definitions\SymcData\spcPorscheSMRDef\20161121.023],
 result=-533463040, ex=com.sygate.scm.server.util.ServerException: Unexpected server error.]

Checking the size of full.zip files indicated in the errors above shows that its is not of correct size.

Cause

Corrupted full.zip file exists in database and in \Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\Inetpub\content folder.
The file/s may exist in several monikers.
The existance of the corrupted files prevents Liveupdate from replacing the files.

Resolution

  1. Review SEPM logs for Delta creation errors to obtain monikers to check for corruption.
  2. Open a case with Broadcom Support to obtain ContentCleanupTool to remove the corrupt definitions from database and SEPM content folders.
  3. Run SEPM Liveupdate to download updated definitions.