Clients not updating... 1

[aquias]

Hiho all,

Currently we're running Symantec Corporate 8.01 (yes, I know outdated). What I'm seeing happen, is that the server is updating itself, but none of the clients are receiving the definition push.

I don't see any errors in the event viewer regarding this and I've already taken the following steps.

1. Ran a repair on the various symantec plug in's on the server.

2. Created a new liveupd.hst file and pushed it out to my test system.

3. Copied down the grc.dat file.

4. Attempted to force the update via the MMC snap in.

In addition, I've also seen the behavior of my groups disappearing off of the server. I reboot and they return. At this point, I'm fairly certain that I'm looking at re-install (attempting to get the money approved to bring us up to 10.x). But I was curious if anyone else had seen this behavior and had any thoughts on where the problem may reside.

 

[Stiddy]

-Is your DNS/WINS setup working?
-Are any wks behind a FW?
-Are all of the SAVCE services started?
-What kind of server and wks are we talking and what transport method? (TCP/IP) ?
-If you open SAVCE on a wks, does it point to your server as a parent server?
-Are all of the services started on the clients?


Just a few ?'s I would ask myself...

 

[aquias]

Stiddy,

Thanks for the response, here's the answers (sorry the first post was so brief, in the middle of a bit).

1. DNS resolves, we don't currently utilize WINS.
2. All servers and workstations are behind the same firewall.
3. All services appear to be running. Stopped and restarted all Symantec services with no changes.
4. Windows 2003 SP1 and all workstations are Win XP SP2, TCP/IP (or LAN setting on the management console) is the transport method. Everything is tied back to the IP.
5. It points back to the parent server and lists out the group that system is part of.
6. All Symantec services are started on the client side and have been restarted for testing purposes.

 

[Stiddy]

WIthin the SSC console. If you right click your server group and looku under "How clients recieve Virus definition updates", is "Update virus defintions from parent server checked" with default setting of 60 minutes?

I am sure you did not overlook this but I still had to ask!!!

 

[Stiddy]

correction.

WIthin the SSC console. If you right click your server group and look under "Virus definition manager" and then "How clients recieve Virus definition updates", is "Update virus defintions from parent server checked" with default setting of 60 minutes?

 

[aquias]

Stiddy, don't worry I've done such things before!!

However, the group is pointed to the server with a valid username/password for access. They are actually set to receive an update every half an hour. I'm going to try unassigning one system from the group (Should have done this earlier, never thought of it) and see if it is some kind of problem specific to this group setup.

 

[aquias]

I'm so very confused...I tried to unjoin a system from the group, hung the console, rebooted the server and when it came back up, the updates had been pushed...

Erm...anyone gotta though?!

 

[Stiddy]

I had a lot of problems with the console hanging with version 8.1.0.825. Upgraded to 9 and the console no longer hangs. Just a side note. I also had problems with the service hanging at starting never getting started. I am also stumped on your problem. Play, play, play and see what you can find out.

Here is a couple of docs that I am sure you have already found. But if not, lets see if they help

http://service1.symantec.com/SUPPOR...tec AntiVirus Corporate Edition&ver=8.x&tpre=

http://service1.symantec.com/SUPPOR...tec AntiVirus Corporate Edition&ver=8.x&tpre=

This is a real good one:

http://service1.symantec.com/SUPPOR...sav_ce&dtype=corp&svy=&prev=&miniver=sav_8_ce