Result= /bin/date -j -f '%Y%m%d' $(cat '/Library/Application Support/Symantec/AntiVirus/engine.

Result= /bin/date -j -f '%b %d, %Y' '$(cat '/Library/Application Support/Norton Solutions Support/Norton AntiVirus/Engine/WHATSNEW.TXT' | grep 'Symantec Security Response' | awk '')' '+%Y-%m-%d 00:00:00'įi Check to see if SEP v12ru4 or higher is installed NOTE: SEP v12ru5 and ru6 high versions re-introduced the 'Engine' Directory

Cobbled together from other's hard work Modification for SEP v12ru4 by Christopher Miller for ITSD-ISS of JHU-APL, Dated, LastMod: # Check to see if Norton v10 is installed !/bin/sh # Find the date of Virus Definitions for Norton AntiVirus or Symantec EndPoint This script has been verified to work on Norton AntiVirus (v10, v11) and Symantec Endpoint (v11, v12). Symantec Endpoint Protection, developed by Broadcom Inc. This should now just query the 'engine.mfst' file for date info and should be absolute. We're likely moving to McAfee soon, so I'll get to start all over again.ĮDIT: Noticed an issue with some of our machines running SEPv12 and the number of older def folders kept. This computer will remain unprotected from viruses until virus definitions are downloaded to this computer.Application has encountered an error.Īnd event ID 4 - SRTSP - Error loading virus definitions.I'd just finished updating this for the 3rd time a few days ago and am posting it for the 3rd party EA for SEP.

It has the largest market-share of any product for endpoint security. I get event ID 40 - Symantec Endpoint Protection has determined that the virus definitions are missing on this computer. Symantec Endpoint Protection, developed by Broadcom Inc., is a security software suite that consists of anti-malware, intrusion prevention and firewall features for server and desktop computers. No other servers/clients report the same problem and they all use the same definitions. Stopping EndPoint - Doing this - - Same problem, after a few mins it reports corrupt defs.ĭoing the same as above but running the intelligent updater afterwards - same problem Running the intelligent updater - no effect Problem is I now have 1 client (my main file server and DC) where the defs are corrupt and I can't resolve it.

Log in below if youve already activated your CertCentral account. Occasionally I'll get one client report a corrupt definition, so I usually just run the intelligent updater on them and it resolves it. All legacy Symantec account portals have moved to CertCentral. I've got all my desktops/servers protected with Symantec Endpoint Protection 11.1 and has been working fine for over 18 months.

Symantec endpoint definitions