Symantec Endpoint Protection 12.1 does not share virus definitions with Symantec Mail Security on the same server.

book

Article ID: 153878

calendar_today

Updated On:

Products

Mail Security for Domino Mail Security for Microsoft Exchange Endpoint Protection

Issue/Introduction

With the introduction of Symantec Endpoint Protection (SEP) version 12.1, antivirus definitions will no longer be shareable with other products. SEP will assume full control of its definition sets in order to optimize performance and security. 

 

Providing definitions independently allows Symantec to:

  • Build a lighter and faster LiveUpdate Engine (LUE), targeted for the SEP release only. This greatly improves the experience for all endpoints, including desktops and servers.
  • Improve defense in depth by optimizing the security needs of each product, including the usage of Certified Definitions for SEP and Rapid Release Definitions for SMS
  • Adapt to Virtualization efficiency needs where definitions on every machine may be eliminated altogether.
  • Eliminate the risk of sharing definitions, including definition incompatibility and resource conflicts that could lead to downtime.
     

 

Resolution

Configure SMSMSE to independently download definitions.  See the following article for options: Virus Definition Update Methods Available for Symantec Mail Security for Microsoft Exchange (SMSMSE).


This must be done prior to implementing SEP. Otherwise, SMS will continue to scan emails, but with outdated definitions.
 

(Page19) of the SEP manual

ftp://ftp.symantec.com/public/english_us_canada/products/symantec_endpoint_protection/12.1/manuals/rtm/Release_Notes_SEP12.1.pdf

 LiveUpdate no longer shares definitions among products You can use LiveUpdate to update your definitions. However, those definitions will not update your other Symantec products.

To work around this change in LiveUpdate, re-enable the scheduler in your other Symantec products and update them independently of Symantec Endpoint Protection.


Applies To

Who this affects:

  • Only those customers who have opted to change the default setting and share antivirus definitions when SEP and SMS are on the same server.  These customers have configured SEP to download definitions to the shared folder while changing the default and disabling the built in LiveUpdate functionality of SMS.

Who this does not affect:

  • Customers who are using SMS without changing the default LiveUpdate settings. These customers are using the LiveUpdate functionality of each product to download definitions.
  • Customers who are using Certified Definitions for SEP and Rapid Release Definitions for SMS.