I'm receiving these 3-4 times a day and I'm not understanding why this is occurring. Clients should not be downloading full definitions correct but deltas correct? 27-30 clients show up in this alert each time.
All these alerts are for our remote site that is in a country across the ocean and utilizes a GUP. I would presume the GUP was dishing out all the correct updates. Why would clients try and connect to our SEPM server to download full definitions? What worries me is the file size is 231. What causes a client to download a full definition and could someone explain to me how revisions/deltas/definitions function in Symantec because the documentation isn't clear.
My revision count is set at 90 revisions.
The report shows that the clients are trying to download from my SEPM server? Here is a sample alert I'm getting:
The reason states "Server did not find clients closest matches" what does this mean exactly? The clients builld deltas off the full definition zip file right?
Any answers would be appreciative as no forums have really answered this question thoroughly yet--each forum post I've come across has been cryptic and with no answer.
| Client IP | Product Version | Definition Name | Source Revision | Target Revision | Reason Code | Reason Descriptions | Time | Server | File Size |
| 10.x.x.x | 12.1.4013.4013 | SEPC Virus Definitions Win32 12.1 RU6 | 170206020 | 170207001 | 7 | Server did not find clients closest matches | 02/07/2017 10:15:54 | SEPM-Server | 231 MB |