Help understanding Virus Definition Manager

[gchaple]

I am managing several NAVCE 7.5 installations.
I schedule the "Virus Definition Manager" to check for new updates every day, and the managed clients are updated automatically. Very nice

But lately Symantec seem to be updating their Intelligent Updater Defs, and hence their Norton AntiVirus Corp. Edition Defs on an almost daily basis.

But the LiveUpdate Defs lag behind and I get an Event log ID 16 "Virus Definitions Current" message.

Now, wanting to keep by clients covered I am manually downloading and running the Intelligent Updater Defs each morning. But it is getting exhausting!

Has anyone any suggestions!

Thanks

 

[yizhar]

HI.

I'm having the exact same issue on several NAVCE7.5 installations, since the Feb 27 update.
I also don't understand why Symantec is doing this.

Please post here if you get an answer.
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[ppride]

I had the same concern. Symantec Tech responded that although Intelligent Updater definitions are release more frequently, the definitions in LiveUpdate are sufficient for corporate environments (Intelligent Updater defs have category 1 and 2 updates - not muc of a risk for corp. users). Simply check the

http://www.sarc.com

site and look in the Am I Protected? section. If you have the LiveUpdate definitions listed, you're good. Here's my response from Symantec:

- - - - - - -

Per your request I will try to explain the reason why it "appears" that your definitions are out of date:
Here is a cut and paste from

http://www.sarc.com

(Symantecs security response page).
Intelligent Updater Defs created March 5
Intelligent Updater Defs released March 5
LiveUpdate Defs released February 27
Norton AntiVirus Corp. Edition Defs Version: 40305a
Norton AntiVirus Corp. Edition Sequence Number: 15201
Norton AntiVirus for Mac Defs released February 28
Total Viruses Detected: 58980


The way that Liveupdate works (today as well as in the past) is that our Liveupdate servers are updated with new definitions every Wednesday unless a category 3 or higher virus outbreak occurs. If this happens, we will update the Liveupdate servers as soon as the definitions to catch the cat. 3 or higher virus are ready. The recent change that we have made deals with the intelligent updater which is now being released on a daily basis. If you choose to, you can download this file (available on our web site) and run it on the primary server to update your definitions on a daily basis. The only difference between the updates that Liveupdate retrieves and the the intelligent updater is that the intelligent updater contains definitions to catch the level 1 and 2 virus' that come out during the week. This is why, in the above cut and paste, you see a different definition date for Liveupdate and intelligent updater.
I hope this helps explain the situation
Thanks for calling Symantec
Todd Vinson, MCSE
Product Support Analyst
Symantec, Corp.
tvinson@symantec.com