Distributing virus definitions for Symantec Mail Security for Microsoft Exchange (SMSMSE) via LiveUpdate Administrator 2.x.

Article:TECH96018  |  Created: 2009-01-08  |  Updated: 2013-10-30  |  Article URL http://www.symantec.com/docs/TECH96018
Article Type
Technical Solution


Issue



The organization's Exchange servers are isolated from the internet and cannot successfully retrieve new AntiVirus definitions via LiveUpdate. How to ensure definitions will be updated without internet access? 


 


Environment



Please note: SMSMSE automatically shares definitions with Symantec Endpoint Protection/Symantec AntiVirus Corporate Edition under the following scenarios.  Do not use this article when SMSMSE is sharing definitions with SEP/SAV.

  • SEP 12.0 and lower
  • 32-bit OS or 64-bit OS and SMSMSE version 6.0.8 and lower

See the following article to share definitions between SEP 12.0 and lower and SMSMSE version 6.0.9 and higher on 64-bit OS: How to Share Virus Definitions Between Symantec Endpoint Protection (SEP) and Symantec Mail Security for Microsoft Exchange (SMSMSE) 6 on a 64 bit Operating System

The instructions in this article can be used for 32-bit Exchange 2000 or Exchange 2003 servers that do not have a SAV or SEP client installed, or that have the SEP 12.1 client installed. (SEP 12.1 cannot share definitions with SMSMSE.)  Alternately, the legacy LiveUpdate Administration Utility 1.x (LUAU 1.x) can be used to update 32-bit SMSMSE implementations.  Be sure to configure the download of "SMSMSE Virus Definitions 5.0" for 32-bit platforms.  For more details, please see How to configure LiveUpdate Administration Utility 1.x to download AntiVirus definition and VSP updates for Symantec Mail Security for Microsoft Exchange 6.x


Solution



Configure an internal LiveUpdate Administrator 2.x (LUA 2.x) server to retrieve definitions for SMSMSE and distribute them to SMSMSE servers.

NOTE: This document is intended as a walkthrough to download virus definitions for SMSMSE 6.0.9 or later on a 64-bit computer by using LUA 2.x. For more general LUA 2.x information, see here. LUA 2.x must be version 2.2.2 or greater. Download the latest version of the LUA here.

For an example of how to configure LUA 2.x to download content for 64-bit SMSMSE 6.5 servers, please see the Connect Forum article Illustrated Guide to Configuring LiveUpdate Administrator 2.x for SMSMSE 6.5.5

  

1. Configure an internal LiveUpdate server that does have Internet access to download definitions for SMSMSE.

This is done by installing LUA and then configuring it to download definitions for SMSMSE.

Install LUA

a. Double-click LUAESD.exe. 
b. If the setup detects that the JRE has not been installed there will be a prompt to download and install it.

The installation of the JRE is not controlled by the LiveUpdate Administrator installer. It is possible to install the LiveUpdate Administrator once the JRE is installed. Download JRE here (note this link is maintained by Sun, and may change without notice). Ensure the 32 bit version of JRE is being installed, the 64 bit version will not work for LUA 2.x

c. In the Destination Folder window click Next to accept the default installation path or click Change to change the location of the installation file folder.

Tomcat, the PostgreSQL database, LiveUpdate Administrator files, and the documentation are installed to this folder. The default installation folder location is C:\Program Files\Symantec\LiveUpdate Administrator\.


d. On the Manage Updates window select the location where the downloaded updates should be stored, and then click OK.

This location cannot be changed after installation. By default, downloads are stored at C:\Documents and Settings\All Users\ApplicationData\Symantec\LiveUpdate Administrator\Downloads.

e. At the Symantec Administrator 2.x admin user information window type the username, password, and email address, and then click Next (note that this does not need to be the domain username/password, this is whatever is preferred to be the username/password to manage LUA).

f. Click Install.


If any or all of the default ports are currently being used, this will be prompted. It is then possible to specify alternative ports for the LiveUpdate Administrator to use. A restart of the LiveUpdate Administrator services must be executed after stopping the programs that are using these ports. It is not necessary to stop the service if you use a port other than the default.

g. Click Finish when the installation is complete.

Configure LUA 2.x to retrieve virus definition updates for SMSMSE

NOTE:  The specific version number for the SMSMSE definitions may be higher than 6.0.9.

a. On the LUA server, open a web browser, and navigate to http://localhost:7070/lua. If managing from a remote server go to http://<ip of LUA server>:7070/lua
b. Enter the user name and password chosen in step 5 of the install directions above.
c. Once logged on, click the Configure tab.
d. Select Update Symantec Product Catalog.
e. After the product catalog has been updated, click Add New Products.
f. Select Symantec Mail Security for Microsoft Exchange and then check the box next to "Symantec Mail Security for Microsoft Exchange (x64) 6.0.9." If you would like to update 32-bit Exchange servers using this method as well, select the checkbox next to "Symantec Mail Security for Microsoft Exchange 6.0." Click OK.
g. Click Download & Distribute.
h. Click Add Download.
i. Give the schedule a name, such as "SMSMSE 6.0.9 download" or something else that will be helpful to show the purpose of this download schedule.
j. Next to "Select Products" click Add.
k. Select the checkbox next to "Symantec Mail Security for Microsoft Exchange (x64) 6.0.9 English." Click Add.
l. Select a Test status (essentially this means you must manually test definitions before they will be made available on the LUA server for clients to download, recommend to Skip Test unless this is a particularly sensitive environment).
m. Select a schedule, recommended is Daily.
n. Select a time, off peak network hours is usually best.
o. Click OK.
p. On the "Download & Distribute Page" click Add Distribution. This will make the definitions downloaded in the last step available to clients.
q. Give the distribution schedule a descriptive name such as "SMSMSE 6.0.9 distribution."
r. Under "Distribute available updates for this product list" click Add.
s. Select the checkbox next to "Symantec Mail Security for Microsoft Exchange (x64) 6.0.9 English." Click Add.
t. Under "Distribute Content To:" select "Production."
u. Under "Select Distribution Centers:" select "All."
v. Select a distribution schedule, recommended is 20 minutes or more after the download schedule to allow time for download processing. Click Ok.
w. Click Configure.
x. Click Distribution Centers.
y. Click the checkbox next to "Default Production Distribution Center" with Type "Production."
z. On the "Edit Distribution Center" page under Product List, click Add.
aa. Click the checkbox next to "Symantec Mail Security for Microsoft Exchange (x64) 6.0.9 English" click Add.

 

2. Configure SMSMSE to retrieve definitions from LUA 2.x server's Distribution Center (DC).

a. From the Exchange server running SMSMSE 6.0.9, open a web browser and go to http://<ip of LUA server>:7070/lua
b. Enter the Administrator user name and password selected during the installation of LUA.
c. Click Configure, Client Settings.
d. Click Add.
e. For the name, enter the (short) host name of the LUA server.
f. Under "Host locations for client settings" select the servers the client should be using, in order of preference. Click OK.
g. Click the checkbox next to the client settings just created and click Export Windows Settings.
h. Save the "Settings.Hosts.LiveUpdate" file and copy it across the network to the Exchange servers.  Save the file in C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate on 32-bit systems or in C:\ProgramData\Symantec\Liveupdate on 64-bit system as "Settings.Hosts.LiveUpdate." (Do NOT rename it Settings.LiveUpdate or attempt to manually edit the existing Settings.LiveUpdate)
i. Open the management console for SMSMSE.
j. Click on Admin then LiveUpdate/Rapid Release Schedule.
k. Check the box next to "Enable automatic virus definitions updates."
l. Select the radio button for "Use Certified LiveUpdate definitions."
m. Under "Schedule" select the radio button for "Run at a specific time."
n. Enter the time that the process should run, recommended is 20 minutes or more after the distribution schedule entered earlier to allow time for distribution.


It is possible to confirm that a SMSMSE server has been configured to use a LUA 2.x Distribution Center (DC) by examining the read-only Settings.Liveupdate file on the SMSMSE server.  The default location for this file:

  • on Windows 2003    C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Settings.Liveupdate.  
  • on Windows 2008    C:\ProgramData\Symantec\Liveupdate\Settings.Liveupdate

 

Ensure that details similar to the following are present when Settings.LiveUpdate is viewed using a text editor:

 

HOSTS\0\ACCESS=[IP of LUA 2.x DC]/[folder]                <----- details configured in LUA's Client Settings.
HOSTS\0\ACCESS2=ftp://[IP of LUA 2.x DC]/[folder]       <----- details configured in LUA's Client Settings.
HOSTS\0\IS_SYMANTEC=NO
HOSTS\0\NAME=[IP of LUA 2.x DC]                                   <----- details configured in LUA's Client Settings.
HOSTS\0\SUBNET=0.0.0.0
HOSTS\0\SUBNETMASK=0.0.0.0
HOSTS\0\TYPE=FTP                                                             <----- protocol configured in LUA's Client Settings.
HOSTS\NUM_HOSTS=1
.....

If the HOSTS present include default targets like http://liveupdate.symantecliveupdate.com, http://liveupdate.symantec.com, and ftp://update.symantec.com/opt/content/onramp then the LUA's custom Settings.Hosts.LiveUpdate have not been imported correctly.




Legacy ID



2009090810113654


Article URL http://www.symantec.com/docs/TECH96018


Terms of use for this information are found in Legal Notices