Because the false reputation cache remain in iron.db, unless and other cache expires,
Otherwise, you have to perform the steps below, it will not have been judged as risks.
==========
Please use the following steps to manually clear out and recreate the IRON
database on SEP 12.1 clients.
1. Reboot OS, enter safe mode OS.
2. Rename the current iron.db to iron.db.backup, the current iron.db location
path is:
[FOLDER_PROGRAMDATA]\Symantec\Symantec Endpoint Protection\[version]\Data\IRON
For example ,
On Windows XP and build(12.1.1000.157), the path is:
C:\Document and Settings\All Users\Application Data\Symantec\Symantec Endpoint
Protection\12.1.1000.157.105\Data\IRON
On Windows 7 and build(12.1.1000.157), the path is:
C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Data\IRON
3. Copy the clear iron.db to current folder from the cached install package
[FOLDER_PROGRAMDATA]\Symantec\Symantec Endpoint Protection\[version]
\Data\Cached installs\CommonAppData\Symc\Name\Version\Data\IRON
For example ,
On Windows XP and build(12.1.1000.157), the path is:
C:\Document and Settings\All Users\Application Data\Symantec\Symantec Endpoint
Protection\12.1.1000.157.105\Data\Cached
installs\CommonAppData\Symc\Name\Version\Data\IRON
On Windows 7 and build(12.1.1000.157), the path is:
C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1000.157.105
\Data\Cached Installs\CommonAppData\Symc\Name\Version\Data\IRON
4. Reboot OS.
============
So let Reputation cache in iron.db and Symantec reputation database synchronized reduce false distress