How to determine whether your firewall is blocking LiveUpdate

Article:TECH102059  |  Created: 2006-01-30  |  Updated: 2012-06-20  |  Article URL http://www.symantec.com/docs/TECH102059
Article Type
Technical Solution


Issue



This document helps you find out whether your firewall prevents LiveUpdate from downloading updates.


Solution



Confirm that the correct ports and protocols are available for LiveUpdate

Make sure that the firewall allows the LiveUpdate executable to connect to the Internet through the correct ports and that the firewall allows connections to the correct domains. Read your firewall's documentation or contact the manufacturer to find out how to confirm these settings.

  • LiveUpdate connects over TCP ports 80 (HTTP), 21 (FTP) and 443 (HTTPS).
  • The file that connects to the Internet is LuComServer_*_*.exe in LiveUpdate 2.5 and later and Lucomserver.exe in LiveUpdate 2.0 and earlier.
    The default folder for this file is C:\Program Files\Symantec\LiveUpdate.
  • LiveUpdate connects via HTTP to the domains symantec.com, liveupdate.symantecliveupdate.com, liveupdate.symantec.com ,and akamai.net.
    If a connection fails, LiveUpdate tries to connect to one of the other listed domains. The listed domains may change because of server maintenance.
    If LiveUpdate cannot make an HTTP connection, LiveUpdate connects via FTP to update.symantec.com/opt/content/onramp.

    Note: Symantec does not supply IP addresses for Symantec LiveUpdate servers. Because the servers are not static, routing directly to an IP address may cause LiveUpdate to fail.


Download a Livetri.zip file to troubleshoot possible corruption

  1. Download the current Livetri.zip file from the Symantec LiveUpdate Web site: http://liveupdate.symantecliveupdate.com/livetri.zip
    If you cannot download this file, confirm that your firewall does not block this site. LiveUpdate cannot download updates until you fix this problem.
  2. Open the Livetri.zip file with Notepad.
    • If a firewall modified the file, an administrative alert may be visible in plain text or the file may be empty.
    • If the file is unreadable, open the file with a zip utility.
  3. Confirm that the Livetri.zip archive contains the following files:
    • Liveupdt.sig
    • Liveupdt.tri
    • Liveupdt.grd


If any of these files are not present, the archive is corrupted or is not the correct file.
If all of these files exist, the Livetri.zip file is not corrupted, and a firewall did not modify the archive.




Technical Information
The file name LuComServer_*_*.exe will reflect the actual version of LiveUpdate, i.e. LuComServer_3_3.exe for LiveUpdate 3.3.

 



Legacy ID



2006113012122848


Article URL http://www.symantec.com/docs/TECH102059


Terms of use for this information are found in Legal Notices