Dark Network endpoints are not receiving virus definition updates from the SEPM, ever since the SEPM was upgraded

Products

• Endpoint Protection

Issue/Introduction

The SEPM retrieves updates from a LiveUpdate Administrator (LUA) and the clients can only update from the SEPM, as they do not have access to the internet or the LUA. After upgrading the SEPM, clients no longer receive virus definition updates from the SEPM. The clients have not been upgraded and other content types appear to be updating fine.

Environment

Dark Network

The SEPM retrieves content from an LUA.

Cause

The SEPM publishes definition content for multiple client versions using source content for its own version. If definitions content for the version of the SEPM is not available, then it cannot publish definitions for clients that share similar content.

Resolution

Update the settings in the LUA so that the product version matching the SEPM is made available. Complete LUA configuration steps are located here: Live Update Administrator (LUA) Configuration

1. As per Step 1 in the article, add the Symantec Endpoint Protection product for the new version.
2. As per Step 3 in the article, add the new product version to the content to be hosted by your distribution center.
3. As per Step 4 in the article, add the new product version to the content to be downloaded, in the download schedule(s), and to be distributed, in the distribution schedule(s).
   Note: Not all languages may be necessary, you may only need to select English.

Once you have the product added to My Symantec Products, the distribution center(s), the download schedule(s), and the distribution schedule(s) you can run a new download or wait for the next scheduled run. Upon successful download and distribution, run LiveUpdate from the SEPM and confirm the virus definitions content for the new SEPM version has updated successfully. Clients will then begin to download the new content after their regularly scheduled heartbeat and download randomization.