Endpoint Protection

Hi (again) !

So everything is working, server, client connection and others ... Exept LU !

When i check Show LU status it says last exec 05/03/2012 at 16:34 - next launch 05/03/2012 17:34 (we're 06/03/2012 and it's 8:14 !)

So i clicked on download LU content and started it ... It says : no update found for each version of clients i have.

Changed the service to run under system account (see my other post) and checked proxy to be used to download updates.

Currently, i'm checking with my network admin to see if proxy is getting requests from my server but this is getting me crazy !

if you have any idea of where should i look ...

Hi,

Have you checked the local system date of LU server??

And it s correct ...

Seems to be impossimple to connect to my proxy, so i changed (again) to run as it used to work (SEPM service as spécial account and no proxy)

I've cleaned up C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads and rerun LU, then 41 folders  named TriXYZ (where XYZ are incremential numbers) and several updates seems to appear in it but in le LU window "No updates found for SEP Win32 12.1 (French)" and that for each version (Win64, SEP 11.0.7000.975 Win32 & 64)

Seems to be hanged for now ... nothing else happens....

I'm with my networkadmin to check gateway/proxy (our proxy works in 2 modes, proxy AND gateway) ...

If you have LU execution time inconsistency, please reboot the server and see if next execution time is then correct.

Do you have different result if you run LiveUpdate via SEPM GUI (Administrateur > Serveurs > Site Local > Telecharger le contenu LiveUpdate) and if you run it using command line (luall)?

Please paste here the content of log.liveupdate to see what happens during download sequence.

Rebooted and made LU as you suggested John. Here's the log file (in attachement)

After reboot, the update still takes looooong time in both method (via admin tab or via luall process)

I noticed that at the end a line says ForceStop but i didn't cancel anything ...

I'm rebooting the server again ...

It looks like he see the files but don't integrate them ...

Edit : Maybe i should remove older client packages (i still have the 11.0.6 and 11.0.7) but if i do so, will the updates for these clients be downloaded as i've few (something about 10) 11.0.6 and all others (about 240) are 11.0.7 ?

Attachment(s)

LU.log_.txt   1.79 MB 1 version

I've just tested few things :

Installed a brand new Windows 2003R2

Installed SEPM 12.1

Configured the proxy

Lunched liveupdate process and Virus Defs are downloading.

I can see several files created but these are quite bigger than on the other server !

So this is something within LU after migration that is not working

LiveUpdate version used is correct for 12.1 (3.3.1.23). As the download stage seems to be successful, could you please past here the content of sesmlu.log (%SEPM%\tomcat\logs\SesmLu.log)?

I cutted it as it s quite a big file, if you need more i will post it :)

 I saw at the end something that might be the cause !

spcIronS SesmLu Failed to notify SESM servlet of new LiveUpdate package.at .\SesmLu.cpp[1319]

I was thinking of either reinstaling LU or repairing SEPM ... will wait for your updates

By the way, thanks for your time !

Attachment(s)

sesmLu.log_.txt   1.48 MB 1 version

Will check back if any solution come up ! :)

SEPM11 runs Tomcat and uses IIS.

SEPM12 seems to run apache instead of IIS

When migrating from 11 to 12, is there any issues with IIS still runing and apache too ?

As each things i do does not work i was wondering about this ...

You may have IIS and Apache used at the same time, depending on your initial SEPM 11.0 configuration. If that's the case, an ISAPI Proxy would be automatically configured to re-route traffic from IIS to Apache. All details are available here: http://www.symantec.com/docs/TECH180596

IIS is no longer used as no website are in it. So i removed it to see if it might be a cause ... no luck

I had another contact, and no luck again, none of what i was suggested resolved my issue.

As it s a production server, and a vmware server, reverted it back to his orginal functionnal state (11.0.7) and support told me to wait for the next release that should happen this month.

Too bad it's not working, I was enthousiasted about the 12.x version and now feeling a little disappointed ...

But as i'm a curious IT, i'll start a new server, push 11.0.7 SEPM and try a migration. As i told my support contact, this server was originally a 11.0.1 (or .2, can't remember) then upgraded trought all releases to finally end in 11.0.7 so maybe the successives upgrades may have alter something ...

Is it possible to add a new server to my existing infrastructure that could operate as stand alone ?

I mean can i install a fresh 11.0.7 but that will have all the groups and policies that i had created into my production server ?

Start with a fresh SEPM database should fix the problem (that's the reason why I suggested to test Disaster Recovery procedure without database backup).

If you want a new standalone SEPM (means no connectivity/replication/load-balancing), you would need to export/import your policies from production SEPM into the new test SEPM.

Hi Yannick,

I am hoping that your SEPM LiveUpdate troubles are long over--- just putting an update into this Forum thread for the benefit of any admin in similar circumstances who finds this via an Internet search.

I have recently come across a similar "Content catalogue lock" error message, and am glad to find that this matches a fix which went into SEP 12.1 RU1 MP1.  Should anyone encounter similar, my recommednation would be to upgrade to the very latest available SEPM and see if that does not solve the problem.

Hope this helps!  &: )

Hi Mick

Thanks for the update !

I've downloaded the updated SEPM last friday !!

So i'll surelly try asap and might update this post :)

Thanks again for the info !

Hey everyone.

SEPM 12.1 RU1 MP1 fixed this issue as you suggested Mick !

Everything went fine during the migration process and my 11 upgraded to 12 is now updating as expected !

Thanks to all for your time !

Many thanks for updating the thread.  Glad to hear that your SEPM is now functioning correctly!  &: )

Do be sure to keep your environment up-to-date and protected/patched/secured by strong passwords.  There's a lot of bad stuff in circulation at the moment...