Reply
Rootkit Eradicator
Posts: 5,220
Registered: ‎05-30-2008

Re: Norton 2009 Streaming Definitions


ChristopherA wrote:

If you are asking what happens to the pulse updates if you completely turn off Automatic LiveUpdate and run a manual LiveUpdate every 2 hours:

 

In this case the pulse update package you receive would contain the last 10 minutes or so of pulse updates. You will still be fully synchronized every several hours with the latest full virus definitions, which contain all of the functionality present in the pulse updates.


 

 

Just to make clear: Will the user get all of the Modifications over the past two hours when running Norton LiveUpdate every-few-hours?

Tuesday, May 21, 2013: The Symantec THREATCON was Changed to Level 1: Normal | Tuesday, May 14, 2013: Microsoft "Patch Tuesday" | Sunday, May 05, 2013: Microsoft Internet Explorer 8 Zero-Day Vulnerability (Update Released)
Rootkit Eradicator
Posts: 5,220
Registered: ‎05-30-2008

Re: Norton 2009 Streaming Definitions


Floating_Red wrote:

ChristopherA wrote:

If you are asking what happens to the pulse updates if you completely turn off Automatic LiveUpdate and run a manual LiveUpdate every 2 hours:

 

In this case the pulse update package you receive would contain the last 10 minutes or so of pulse updates. You will still be fully synchronized every several hours with the latest full virus definitions, which contain all of the functionality present in the pulse updates.


 

 

Just to make clear: Will the user get all of the Modifications over the past two hours when running Norton LiveUpdate every-few-hours?


 

Let me give you an example: Say Virus XYZ, AQZ and RTT S.V.D. were released at 1759.  User runs Norton LiveUpdate at 1959, where Virus SST, EWW, DEE S.V.D.s have been Released; would the user get the Modifications of the Viruses Modified at 1759 in the 1959 S.V.D.s Update with all the other Mod.s from the past two hours, or would the user only get SST, EWW and DEE S.V.D.s when Updating at 1959?
Tuesday, May 21, 2013: The Symantec THREATCON was Changed to Level 1: Normal | Tuesday, May 14, 2013: Microsoft "Patch Tuesday" | Sunday, May 05, 2013: Microsoft Internet Explorer 8 Zero-Day Vulnerability (Update Released)
Symantec Employee
ChristopherA
Posts: 121
Registered: ‎06-28-2008

Re: Norton 2009 Streaming Definitions

The latter is true. Pulse updates for SST, EWW and DEE will be downloaded at 1959. Definitions for XYZ, AQZ and RTT will be downloaded at, say, 2359, as part of the next full virus definitions update.
Rootkit Eradicator
Posts: 5,220
Registered: ‎05-30-2008

Re: Norton 2009 Streaming Definitions

I thought all the S.V.D.s would back-pile, as it were, and, when the User ran LiveUpdate, would get all the Mod.s from the previous two hours, or ten or more hours in some cases...
Tuesday, May 21, 2013: The Symantec THREATCON was Changed to Level 1: Normal | Tuesday, May 14, 2013: Microsoft "Patch Tuesday" | Sunday, May 05, 2013: Microsoft Internet Explorer 8 Zero-Day Vulnerability (Update Released)
Virus Trouncer
mijcar
Posts: 3,098
Registered: ‎08-01-2008

Re: Norton 2009 Streaming Definitions

That's what I thought, Red.  And I think we're right.  Otherwise, users would really be in trouble!
mij
N360 2013, v.20.1.0.24; Win7 Pro, SP1 (32 bit), IE 9, Firefox 14, No other active securityware
Rootkit Eradicator
Posts: 5,220
Registered: ‎05-30-2008

Re: Norton 2009 Streaming Definitions

Maybe I shouldn't have put ten hours as the Norton 2009 Virus Definitions would cover you.

 


mijcar wrote:
That's what I thought, Red.  And I think we're right.  Otherwise, users would really be in trouble!

 

Are we right?  I know I've had an answer already, but just want to make sure as I, as well as other Users, are still un-sure.
Tuesday, May 21, 2013: The Symantec THREATCON was Changed to Level 1: Normal | Tuesday, May 14, 2013: Microsoft "Patch Tuesday" | Sunday, May 05, 2013: Microsoft Internet Explorer 8 Zero-Day Vulnerability (Update Released)
Symantec Employee
reese_anschultz
Posts: 2,562
Registered: ‎04-08-2008

Re: Norton 2009 Streaming Definitions

[ Edited ]

Chris knows more about this than I do so he may correct me, but what he said is correct.

 

Another way that you can think of this is like a conveyor belt. The Symantec Response engineers are constantly working and providing definitions updates. Every little bit that they get finished gets put onto the conveyor belt. The belt ultimately goes to a big box that wraps up all of the updates into a complete update that gets released about every six hours. Meanwhile, the customers' machines are also watching the conveyor belt and copying each of the updates that go past to their own systems. If the machines aren't powered on or connected to the Internet they can't be watching the belt and won't see the little pieces that go down the belt during that time. When the full package comes down in less than six hours they'll catch up on whatever was missed.

Message Edited by reese_anschultz on 09-26-2008 11:14 AM
Message Edited by reese_anschultz on 09-26-2008 11:14 AM
Reese Anschultz
Senior Software Quality Assurance Manager, Symantec Corporation