Hello!
I have SMSMSE 7.0 installed on six Win 2008R2 Server/Exchange 2007 servers. Each server has SEP Client 12.1.5 installed with only Virus and Spyware Protection and Proactive Threat Protection enabled (email scanning disabled). SMSMSE is installed on D:\ and D:\ has 68GB free space. SMSMSE is configured to Use Rapid Release Definitions (FTP). I cannot use LiveUpdate because internet connections are blocked on servers. I have verified that port 21 is open. I believe all servers are receiving the definition file... symrapidreleasedefsi64.exe.
SMSME on one of the six servers will not update the definitions. SMSMSE event log has two entries:
1. Sever [serverName] was not able to receive RapidRelease Virus Def Updates. Intelligent Updater error code: 0
4 seconds later.....
2. Virus Definitions Update was successful. New virus definitions were retrieved.
The virus definition is still the same... 4/1/2012 Rev 16... the same revision SMSMSE is installed with.
Among others, I've read the following article:
Troubleshooting Rapid Release definition updates in Symantec Mail Security for Microsoft Exchange
http://www.symantec.com/docs/TECH83296
I an receiving symrapidreleasedefsi64.exe and can delete the file manually per the article.
I ran SYMHelp on both SEPClient/SMSMSE. For SMSMSE I received the following warning:
Task Scheduler is not configured properly. Service start mode is set to "Autostart", when it should be "BootStart"
What is "bootStart"? I can't even find "service bootstart" on Google. I checked msconfig and Task Scheduler is selected to start on startup.
The other 5 servers keep sending me email that "Server [serverName] was not able to receive Rapid Release Virus Definition update due to an unknown failure. Check Event Log for details." but these 5 servers are updating.
Please help!!!!