Managing content updates

Article:HOWTO81353  |  Created: 2012-10-25  |  Updated: 2014-09-21  |  Article URL
Article Type
How To


Managing content updates

Symantec products depend on current information to protect computers from threats with the latest threat protection technology. Client computers and servers need periodic updates to their protection content, such as virus and spyware definitions, intrusion protection system signatures, and product software. LiveUpdate provides these Symantec-signed updates through an Internet connection. The LiveUpdate client verifies them to ensure that the updates come from Symantec and have not been tampered with in any way.

Symantec Endpoint Protection Small Business Edition supports the HTTPS, HTTP, and FTP protocols to connect to internal LiveUpdate servers. It supports connections to the Symantec LiveUpdate server over HTTP, with FTP as the backup method. Although HTTPS is not supported for connection to the Symantec LiveUpdate server, the content is digitally signed. The advantage of HTTP is that most clients can connect to the LiveUpdate server over HTTP, and HTTP is typically faster.


The LiveUpdate that Symantec Endpoint Protection Small Business Edition uses does not update content in other Symantec products. If you previously used a single instance of LiveUpdate for content updates on multiple products, you should now enable the LiveUpdate scheduler in those other Symantec products.

You can restrict users from running LiveUpdate only on Windows clients. Users on Mac clients can always run LiveUpdate. Product updates from a LiveUpdate server, however, can be restricted on both Mac and Windows clients. If you restrict product updates from LiveUpdate on a Mac client, you must provide the product updates manually since Mac clients cannot get updates from the management server.

You can configure the Symantec Endpoint Protection Manager Apache web server, however, to allow a small number of Mac clients to download LiveUpdate content. For configuration instructions, see the following article:

Enabling Mac clients to download LiveUpdate content using the Apache Web server as a reverse proxy

Table: Tasks for managing content updates describes some of the tasks that you can perform to manage content updates. Since you can use the defaults for updating, all tasks are optional.

Table: Tasks for managing content updates



Run LiveUpdate after installation

After you install Symantec Endpoint Protection Manager, it is configured to periodically update content automatically. However, you can run LiveUpdate immediately or at any point to download the latest security and product updates.

See Downloading LiveUpdate content manually to Symantec Endpoint Protection Manager.

Typically you should run LiveUpdate after Symantec Endpoint Protection Manager installation if you did not run LiveUpdate during installation. LiveUpdate must download the intrusion prevention signatures before you can apply Intrusion Prevention policies to clients.

Review or change the LiveUpdate schedule for the management server

Review the LiveUpdate downloads and the default schedule that the management server uses to get content updates. You can adjust the schedule.

See Configuring the LiveUpdate download schedule for Symantec Endpoint Protection Manager.

See Viewing LiveUpdate downloads.

See Checking LiveUpdate server activity.

Decide how client computers get updates

Client computers automatically download virus definitions and other product content updates from Symantec Endpoint Protection Manager. You can also allow them to use LiveUpdate over the Internet to download security definitions and other product updates directly from a Symantec LiveUpdate server.


Mac client computers get updates only from a Symantec LiveUpdate server over the Internet.

See How client computers receive content updates.

See Configuring the LiveUpdate download schedule for client computers.

Legacy ID


Article URL

Terms of use for this information are found in Legal Notices