
So how hard would it be to add some intelligence to SEPM? Do some client checks, do some checks on the defs running in SEP that runs on the SEPM, some sort of hash or defs QA check the SEPM does daily and if the defs appear bad, SEPM rolls them all back, and starts again. and "what? Again"? and you try to explain that it can't be explained, SEP just has this problem of corrupt defs now and then and it's just not smart enough to tell when its own defs are bad, can't move forward - it simply gets stuck and sits there. Been this road too often - if a person leaves for a couple of days, and there is a problem with definitions, by the time you get back to it, it's an emergency as the defs are now 9 days old, and no one, including the boss, had current defs and the phone is ringing, email is filling up. Otherwise, I come in after 2 days off for vacation, and spend my next week fixing and cleaning up manually. I think that for the next update or release of SEP, Symantec needs to concentrate on the root cause, or build in an automatic repair system - meaning that if the SEPM detects definitions won't move beyond a certain point, the SEPM automatically rolls back to the last known good instance, cleans up, then moves forward. This will re-populate the database which in turn will update the moniker folders. Run Live update from within the Symantec Endpoint Protection Management console. HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmvirdef64ħ). HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmvirdef32 HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmipsdef64 HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmipsdef32 In the registry, navigate to and delete the following keys: Go to C:\program files\symantec\symantec endpoint protection manager\Inetpub\content\" folder and move all of the subfolders to another place, such as C:\Temp if you want a backup, otherwise delete the sub-folders.ĭatabase cleanup for 32-bit SESC Virus Definitions:ģ) Go to C:\Program Files\Common Files\Symantec Shared\SymcData\ and delete the following folders:Ĥ)In the registry, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps.ĥ). Sometimes, it is noted that if there are corrupt virus definitions downloaded by SEPM, it is required to clean them up and download the virus definitions again.įile system cleanup for 32-bit SESC Virus Definitions:Ģ.
