How to apply Intelligent Updater virus definitions to Protection Engine deployments.

Products

• Protection Engine for Cloud Services
• Protection Engine for NAS

Issue/Introduction

There is a need to update virus definitions in Scan Engine on a system that does not have internet access.  Intelligent Updater provides a portable definition package that can be ran on a sever for manual definition deployment.

 

Environment

Document applies to the following versions:

32-bit:

• Symantec Protection Engine (SPE) 7.0.4
• Symantec Protection Engine (SPE) 7.5.2

64-bit:

• Symantec Protection Engine (SPE) 7.8.x
• Symantec Protection Engine (SPE) 7.9.x
• Symantec Protection Engine (SPE) 8.0

 

Note: Intelligent Updater is not supported by SPE 8.1 and newer. These steps will not work with SPE 8.1 and SPE 8.2./SPE 8.2.x 

Resolution

Download Intelligent Updater package for the installed version of Symantec Protection Engine (SPE)

1. Navigate to the Intelligent Updater download site.
2. Locate and download the correct version from the table below:

(Note:  32-bit / 64-bit versions of Intelligent updater will only work with corresponding 32/64 bit versions of SPE)

SPE Version	Intelligent Updater File Format	Example
Windows 32-bit	yyyymmdd-vvv-core15v5i32.exe	20180213-007-core15v5i32.exe
Windows 64-bit (SPE 7.x)	yyyymmdd-vvv-v5i64.exe	20180213-007-v5i64.exe
Windows 64-bit (SPE 7.8 and newer)	yyyymmdd-vvv-core15v5i64.exe	20180213-007-core15v5i64.exe
Linux/Solaris 32-bit	yyyymmdd-vvv-core15unix.sh	20180213-007-core15unix.sh
Linux/Solaris 64-bit	yyyymmdd-vvv-core15unix64.sh	20180213-007-core15unix64.sh

 

Note: Prior to performing the below steps ensure the Symantec Protection Engine (SPE) service/daemon is running.

• symcscan - Linux/Solaris
• symcscan.exe (Symantec Protection Engine) - Windows

 

Setup and deployment steps for the Intelligent updater packages:

Symantec Protection Engine (SPE) Default installation paths:

Windows:

• 32-bit: C:\Program Files (x86)\Symantec\Scan Engine\Definitions\Antivirus\
• 64-bit: C:\Program Files\Symantec\Scan Engine\Definitions\Antivirus\

Linux/Solaris:

• /opt/SYMCScan/bin/definitions/AntiVirus

 

For Windows based deployments:

1. Open a command prompt (cmd.exe)
2. Navigate to the following location:  <SPE_INSTALL_DIR>\Definitions\AntiVirus\  (Where <SPE_INSTALL_DIR> is the literal install path)
3. Type:  setup-iu.bat enable
4. Type:  "dir" <enter> and confirm shadow.iu has been created
5. Locate and execute the Intelligent updater package previously downloaded.
6. Restart the Symantec Protection Engine service.

Once the steps have been completed, allow 10-15 minutes for the definitions to be fully processed and loaded within SPE.

For Linux/Solaris based deployments:

1. From the bash prompt navigate to:  /<SPE_INSTALL_DIR>/bin/definitions/AntiVirus/  (Where <SPE_INSTALL_DIR> is the literal install path)
2. Type:  ./setup-iu.bat enable
3. Confirm shadow.iu was created in the path
4. Use chmod to change permissions for the Intelligent updater package to 755
5. Execute the Intelligent updater package.
6. Restart the Protection Engine daemon  ( /<SPE_Install_DIR>/bin/symcscan.sh restart )

Once the steps have been completed, allow 10-15 minutes for the definitions to be fully processed and loaded within SPE.

 

Additional info:

To disable the capability to install Intelligent updater packages run the setup-iu.bat with disable instead of enable.  The shadow.iu file will be removed if successful.

Example:  ./setup-iu.bat disable