About the LiveUpdate program

Article:HOWTO59408  |  Created: 2011-10-04  |  Updated: 2011-10-04  |  Article URL http://www.symantec.com/docs/HOWTO59408
Article Type
How To


Subject


About the LiveUpdate program

Symantec Message Filter relies on up-to-date information to detect viruses and threats. One of the most common reasons that problems occur is that virus definition files are not up-to-date. Symantec regularly supplies the updated virus definition files that contain the necessary information about all newly discovered viruses and threats. Regular updates of that information maximize security and guard your organization against infections and the downtime that is associated with an outbreak.

LiveUpdate performs the following functions:

  • Obtains the antivirus rule updates from Symantec Definition Server

  • Validates the new rules

  • Delivers the rule updates to the antivirus module

Default:

<program xsi:type="jluControllerType" name="jlu-controller">

See About LiveUpdate rule updates.

Table: Valid LiveUpdate program elements describes the LiveUpdate program valid elements and their values.

Table: Valid LiveUpdate program elements

Element

Description

log

Specifies the log level, log retention characteristics, and jlu-controller log file location information.

Default for Linux and Solaris:

<log level="4" period ="1" periodUnits="DAY" 
  numberRetained="30"> /var/log/brightmail/
  jlu_controller_log</log>

Default for Windows:

<log level="4" period ="1" periodUnits="DAY" 
  numberRetained="30">C:\Program Files\
  Symantec\SBAS\Scanner\Logs\jlu_controller_log.txt</log>

kickCommand

Specifies the command that re-initializes the Server.

Default for Linux and Solaris:

<kickCommand>/opt/symantec/sbas/Scanner/bin/
  kicker /opt/symantec/sbas/Scanner/etc/
  bmiconfig.xml /opt/symantec/sbas/Scanner/jobs/
  bmserver/bmserver.pid</kickCommand>

Note:

If you use a non-default installation directory location, replace /opt/symantec/sbas/Scanner with /$loadpoint.

Default for Windows:

<kickCommand>C:\PROGRA~1\Symantec\SBAS\Scanner\
  bin\kicker.exe -s BMISERVERSVC</kickCommand>

jluClientLog

Specifies the file that contains jlu-client log. Jlu-controller component uses jlu-client to download platinum antivirus definitions.

Default for Linux and Solaris:

<jluClientLog>"> /var/log/brightmail/
liveupdt.log</jluClientLog>

Default for Windows:

<jluClientLog>C:\Program Files\Symantec\
SBAS\Scanner\Logs\liveupdt.log</jluClientLog>

javahome

Specifies the location of Java Runtime Environment.

Default for Linux and Solaris:

<javahome>/opt/symantec/sbas/Scanner/jre</javahome>

Default for Windows:

If you are a Windows user, you need to install Java Runtime Environment 1.5 or later. If you already have installed JRE on your computer, Symantec Message Filter detects it and saves the javahome location.

See System requirements.

jlutempdir

Specifies the temporary directory for LiveUpdate where it initially downloads platinum antivirus definitions.

Default for Linux and Solaris:

<jlutempdir>/tmp</jlutempdir>

Default for Windows:

<jlutempdir>C:\Program Files\Symantec\
SBAS\Scanner</jlutempdir>

mode

Specifies the type of antivirus definitions, where 1 is Platinum definitions and 2 is Rapid Release definitions.

Default for Linux, Solaris, and Windows:

<mode>2</mode>

platinumDefsHost

Specifies from where to obtain platinum virus definitions. Platinum virus definitions can be obtained from the Symantec LiveUpdate server or from the LAN host.

To obtain virus definitions from the LAN host you need to specify the address, port, user name, password, and proxy host information.

For example,

<customServer enabled="true">
       <address>http://192.168.0.1</address>
       <username>pqr</username>
       <password plain="true">1234</password>
       <proxy enabled="true">
            <server host="192.168.0.1" port="12"/>
            <username>xyz</username>
            <password plain="true">abc</password>
            </proxy>
</customServer>

Default for Linux, Solaris, and Windows:

<platinumDefsHost defaultUrl=
"http://liveupdate.symantecliveupdate.com:80">
      <customServer enabled="false">
      </customServer>            
 </platinumDefsHost>

See Obtaining the virus definition updates.

avDefsPlatinumProduct

Specifies the product name, version, type of definition, and language attributes of the platinum definitions.

Default for Linux, Solaris, and Windows:

<avDefsPlatinumProduct>
       <name platformControl="win64">SMF Virus 
Definitions Windows 64-bit</name>
       <name platformControl="win32">SMF Virus 
Definitions Windows 32-bit</name>
       <name platformControl="linux">SMF Virus 
Definitions RHEL 32-bit</name>
       <name platformControl="solaris">SMF Virus 
Definitions Sparc-Solaris 32-bit</name>
      <version>1.0</version>
      <type>VirusDef</type>
      <language>SymAllLanguages</language>
</avDefsPlatinumProduct>

rapidReleaseUrls

Specifies the Rapid Release definitions URLs and sequence number URLs for Rapid Release definitions downloads.

Default for Linux, Solaris, and Windows:

<rapidReleaseUrls>
       <seqUrl>http://definitions.symantec.com/                                                                                               	<seqUrl>http://definitions.symantec.com
/defs/rapidrelease/version-info.txt</seqUrl>
       <defsUrl platformControl="win32">http:
//definitions.symantec.com/defs/rapidrelease/
ennlu.x86</defsUrl>
       <defsUrl platformControl="win64">http:
//definitions.symantec.com/defs/rapidrelease/
symrapidreleasedefsi64.exe</defsUrl>
       <defsUrl platformControl="linux">http:
//definitions.symantec.com/defs/rapidrelease/
ennlu.lin</defsUrl>
       <defsUrl platformControl="solaris">http:
//definitions.symantec.com/defs/rapidrelease/
ennlu.sol</defsUrl>
</rapidReleaseUrls>

Legacy ID



v59546409_v64406064


Article URL http://www.symantec.com/docs/HOWTO59408


Terms of use for this information are found in Legal Notices