SPSS reports that definitions are out-of-date, starts countdown for SPE to go offline

Products

• Protection for SharePoint Servers

Issue/Introduction

On a multi-server SharePoint farm running Symantec Protection for SharePoint Servers (SPSS), one or more servers are reporting the following error:

Warning: The virus definition is out-of-date. Date: Oct 22, 2024. Revision 7. Current virus definition over all Symantec Protection Engines is dated Oct 22, 2024. Revision: 8. The Symantec Protection Engine will go offline in: XXX minutes.

After XXX minutes the Symantec Protection Engines (SPEs) attached to the servers reporting the error go offline and stop scanning uploaded files.

Environment

SPSS 6.1.1 installed on multiple servers in a SharePoint farm

Cause

At least one SPE has received an updated version of the Stargate engine which uses a different revision of the definitions.

Resolution

Follow the steps below to prevent the SPEs from being taken offline and to suppress the error:

1. Open the SharePoint console
2. Navigate to Symantec Protection 6.1 for SharePoint Servers > Global Symantec Protection Engine settings 
3. Uncheck the option "Take a Symantec Protection Engine offline if its virus definition is not the latest."

 

Additional Information

Checking for the Latest Virus Definitions
https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/symantec-protection-for-sharepoint-servers/6-1-0/Configuring/checking-for-the-latest-virus-definitions-v132740628-d1062e8640.html