Installing fallback definition on Linux client

Products

• Endpoint Protection
• Endpoint Security

Issue/Introduction

There is no internet connectivity on Linux client, installation of Symantec Endpoint Protection (SEP) is done using offline installer.

When checked the status of this client on Symantec Endpoint Protection Manager (SEPM), the AntiVirus Status will show as '"Component is Malfunctioning" due to lack of definitions.

Environment

SEP version 14.3 RU1+

Resolution

Following steps can be applied to install the Fallback definition on the offline Linux client while the other options to install latest definition is explored:

1. Stop AMD service with this command:
   /etc/init.d/sisamdagent stop
2. Clean up any existing definitions with this command (the folder may be empty as no definition installed yet):
   rm -rf /opt/Symantec/sdcssagent/AMD/sef/definitions/symcdata/symplatformdefs*
3. Copy the attached 'fallback.tar.gz' (Definitions: 12/06/2022 rev. 043) in the same location on client:
   /opt/Symantec/sdcssagent/AMD/sef/definitions/symcdata/symplatformdefs
4. Extract the fallback definitions in the same directory:
   tar -xvzf fallback.tar.gz 
5. Remove copied fallback.tar.gz file
   rm -rf fallback.tar.gz
6. Start AMD service:
   /etc/init.d/sisamdagent start

To verify if the definition is installed successfully, run the below command (supported in SEP 14.3 RU3 and above) from /opt/Symantec/sdcssagent/AMD/tools:
./sav info -d

Additional Information

What are the different ways to update the content on SEP for Linux clients?

Managing your Linux client using the command line tool (sav)