Technical Advisory – Symantec Endpoint Protection v11.x and v12.x clients not showing current revision of definitions.


ISSUE: All Symantec Endpoint Protection v11.x and v12.x clients are experiencing an issue with virus definition dates getting stuck at 12-31-2009.

CAUSE: There is an issue in the internal Symantec program code that causes definitions to get stuck at 12-31-2009. The revision # of the 12-31-2009 definitions will continue to increment.
• Example: Definitions 12-31-2009 r114 from yesterday is now 12-31-2009 r121.
• Symantec ensures us, although the date is ‘stuck’ – the definitions are in fact up-to-date and we are still protected (as indicated by the r# increment).

RESOLUTION: End users need to take no action, the issue will be resolved when a patch becomes available for the product. This patch will be released via the management server and will be transparent to the end-users. In the meantime, the current release as of 1/11/2010 is Definition 12-31-2009 r121. There is no need to call DNS Texas support for any issues relating to the antivirus dates as we are aware of the issue. Manually launching liveupdate on the workstations will update the defs to the 2010 date, in most cases -- but it is not required.

Additional updates to this issue will be posted in this forum as they become available.