You notice that several Symantec Endpoint Protection (SEP) 12.1.6.x clients display “Waiting for updates” and these machines show multiple warnings from the user interface (UI). When clicking Details, the machines show that Network Intrusion Prevention, Browser Intrusion Prevention, and Proactive Threat Protection are not functioning correctly.
Errors seen from Application Event logs and SEP Proactive Threat Protection System logs:
"SONAR has generated an error: code 1: description: Heuristic Scan or Load Failure"
Multiple warnings seen from the SEP UI:
When clicking Details: