Symptom
Latest definition date is from 26 October 2011.
I checked the Symantec website and actually the latest ones at date of creation of this DDTS (Feb 8 2013) dates from 7 Feb 2013.
http://www.symantec.com/security_response/definitions.jsp.
So our automatic updates are not "up to date"...
Workaround
Please execute the following script on the ISE database & then do a posture update using the ISE admin UI. This will solve the issue.
DB SCRIPT:
UPDATE sec_res_attribute_value SET SEC_ATTRIBUTE_VALUE='av_def_date_Symantec_Multi_Daily' WHERE SEC_ATTRIBUTE_VALUE='av_def_date_NortonAV'
AND sec_resid IN (SELECT sec_resguid FROM sec_res_master WHERE sec_res_name ='NortonAV_SymantecEndpointProtection_12_1_x');
UPDATE sec_res_attribute_value SET SEC_ATTRIBUTE_VALUE='av_def_ver_Symantec_Multi_Daily' WHERE SEC_ATTRIBUTE_VALUE='av_def_ver_NortonAV'
AND sec_resid IN (SELECT sec_resguid FROM sec_res_master WHERE sec_res_name ='NortonAV_SymantecEndpointProtection_12_1_x') ;
COMMIT;
