Symantec Endpoint Security (SES) client at Risk due to Out-of-date definitions, and other reasons
Article ID: 279907
Updated On:
Products
Issue/Introduction
In ICDm console you might see the following Device Security status:
At Risk:
- Out-of-date definitions.
- Disabled / malfunctioning (Detection and Response).
- Policy not current (Antimalware).
- Low disk space (Detection and Response).
Environment
Any Symantec Endpoint Protection (SEP) client in cloud managed environment.
Cause
NA
Resolution
1. Out-of-date definitions issue:
Content is considered old or out-of-date if:
- Antimalware content (virus definitions) is out-of-date after 7 days.
- Low-bandwidth and other content is out-of-date after 30 days.
- The administrator has to make sure that the SEP client are up to date, and can download LiveUpdate (LU) definitions.
- Must make sure below URL’s can be Pinged and Telnet (Port: 443) successfully from the affected machine.
Disabled / malfunctioning (Detection and Response):
- Such error can be temporary, and however if it lasts for day in the console in a particular client, then collect SymDiag bundle from this client and open a ticket with technical services.
Policy not current (Antimalware):
- The administrator has to make sure that the Antimalware policy is updated in ICDm console, and once this is correct, this warning should be eliminated.
Low disk space (Detection and Response):
- In ICDm console go to the device details where this warning exists and check the disk space remaining in the disks of this machine.
If the disk space is low, correct the issue by cleaning up the disk and check after some time the ICDm warnings.
Additional Information
Feedback
