Endpoint Protection

Hi everyone!

I'm new on the forum, this is my first post. But, I'd look for any solution for my case before posting this! There's even another topic with almost the same name, but my problem is different.

We're implementing SEP11 in a very large network, 4000+ computers, deployed over 200+ sites. And, in order to lower the network trafic to the sites we're implementing the LiveUpdate Administrator on the sites. By now, we have 3 LiveUpdate Administrator implemented. All of them are runing the download and distribuition tasks daily.

- The first server at the core of the network is configured to get updates at 6AM(local time) from Symantec Server and to publish them at 6:30AM.

- The second server at the largest of the sites is configured to get updates at 7AM(local time) from The first server and to publish them at 7:30AM.

- The third server at a medium site is configured to get updates at 9AM(local time) from The first server and to publish them at 9:30AM.

I'd configure all of them to purge the updates after 3 revisions and daily purge the distribuitions 10 minutes before the download of the new ones.

The first and the second servers are working flawless. Both get their updates and publish it quickly.

I'm having problems with the third server. Every day, it start the downloads, and after a few minutes downloading the updates it gets fail messagens, like these below:           

_________________________
29/10/08     10h13min23s GMT-03:00     Download     critical     root     Download request started by root has failed.

29/10/08     10h13min7s GMT-03:00     Download     critical     root     Download job from source server DAI - Repositorio de LiveUpdate. has failed. There were 4 updates that failed to download.

29/10/08     10h13min7s GMT-03:00     Download     critical     root     Failed to download file 1225263829jtun_nav2k8enncur25.m25 while processing request id 31.

29/10/08     10h13min7s GMT-03:00     Download     critical     root     Failed to download file 1225263829jtun_emt64nav2k8en81026016.m25 while processing request id 31.

29/10/08     0h10min39s GMT-03:00     Download     critical     root     Failed to download file 1225263829jtun_emt64nav2k8en81026016.m25 while processing request id 31.

29/10/08     10h10min39s GMT-03:00     Download     critical     root     Failed to download file 1225263829jtun_nav2k8enncur25.m25 while processing request id 31.  
_________________________

We're monitoring the network, and it didn't show any kind of problem that could make cause this problem. I didn't found any log on the event viewer of the two servers.

But, what's realling cooking my brain out is that, if as soon as the scheduled download task fail, I'd manually run the same task, the task is completed without problems.

The testing computers are HP DX5150 AMD Athlon64 3500+ 1GB RAM 80GB HD. All with XP Pro installed since our desire is to install the LiveUpdate Administrator on PCs that could be used by the users. But these three are installed only with the XP PRO and SEP11. And I'm using LiveUpdate Admin 2.2.1.13 on the first server and 2.1.3.9 on the Second and Third servers.

Any help will be welcome.

Thanks,

Theles

Hi

This is a known scenario.

What is happening is that Symantec is updating the Virus Definitions while LUA is downloading them.

There is nothing to worry about here, the next time that your schedule runs or you manually run an event (as you did) the program grabs the full compliment of new updates and downloads them.

Hi.

Thanks for your attention.

But, I beleive that isn't this case. Let me try to explain it better.

The 1st server download the Virus Definitions Files(VDF) from the Symantec Server

The 2nd and 3rd servers download the  VDFs from the 1st server. I've sheduled the download task on the 2nd and 3rd servers to run 30min after the distribuition task on the 1st server. One complete the task without problems. The other every day fails to download the updates as mentioned before.

Since when it was working starting manually the task, I've created a second and a third jobs with 30min of interval between them, and it has been working on the past few days.

But, I'm still trying to understand what's happening.

hi Theles,

If I understand rightly, you have configured the 2nd and the 3rd server to get their updates from one of the the 1st server's Distribution location. The 2nd server works rightly, but the 3rd server is giving you problems?

To understand what may be the problem, could you tell us the protocol used for the source server of the 2nd and 3rd server? Is it UNC, HTTP, FTP? I am wondering if it may be due to file lock problems where the 2nd server has used the updates to download them and the 3rd server comes along to do the same before the 2nd server releases the lock.

It is strange that you were able to get it working by manually running the task. I also see that, you have got it to work by having another job scheduled in 3rd server about 30 mins later.

-anand

Hello.

Well, let me try this way:

- Symantec Update Server

|

|-> Live Update Server 01 - Downloading from Symantec LU - Working rightly

      |

      |-> Live Update Server 02 - Downloading from LUA 01 - Working rightly

      |

      |-> Live Update Server 03 - Downloading from LUA 01 - Having the problems that I've described previously.

All of them use the HTTP Protocol.

On the LUA 01 the Download Job starts at  15:00h(GMT -03:00) and the Distribuition Job start at 15:20h

On the LUA 02 the Download Job starts at  15:30h(GMT -03:00) and the Distribuition Job start at 16:00h

On the LUA 03 the first Download Job starts at  15:30h(GMT -03:00), the second at 16:00h and the third at 16:30h and the Distribuition Job start at 17:00h

But, strangely, today I didn't get erros on the LUA 03 server as I used to had. But, I'm having erros in the past 3 days on the LUA 01 Server, when downloading from the Symantec LU Server. 

It shows a error after downloading, but the distribuition runs and the clients are updating normally. Weird isn't? Here's the error:05/11/08 15h21min6s GMT-03:00 Distribution informational root Distribution request 28 started by root completed successfully on 1 out of 1 location(s).

05/11/08 15h21min6s GMT-03:00 Distribution informational root Distribution request 28 started by root has completed.
05/11/08 15h20min6s GMT-03:00 Distribution informational root Started distribution of content for request id 28 started by root.
05/11/08 15h20min0s GMT-03:00 Schedule informational root Distribution schedule Distribuição de Vacinas started.
05/11/08 15h18min2s GMT-03:00 Login/Log Off informational root User session of user root was timed out.
05/11/08 15h2min40s GMT-03:00 Download critical root Download request 27 started by root has failed.
05/11/08 15h2min21s GMT-03:00 Download informational root Download job from source server Symantec LiveUpdate has completed successfully. There were 8 product(s) for which updates were found as part of this job.
05/11/08 15h1min45s GMT-03:00 Download informational root Started download of content for request id 27 started by user root.
05/11/08 15h0min0s GMT-03:00 Schedule informational root Download schedule Atualização de Vacinas started.

These was the scheduled job ...

...and these was manually run.

As you can see, at 16h3min it get the error. 1min after I've started manually the job again, and it gave the No New update found. I'd even run it again, but no new update was found... And them the I've run 

On the LUA 02 and the LUA 03 the download and distribuitions run normally today.

-Theles

Hi Again.

First of all. The problem that originally was mentioned on the first message of this topic is no longer occurring. I'm not sure why.

Since the new version had the possibility to choose all the versions to download, I've narrowed the options, letting only the versions that I need. From this change, there were no further errors

On the first LUA server of my intranet, where the erros was happening(after changing the version to the latest), since I wasn't found anything about the erros, I've remove everything, the LUA and the SEP11, deleted all related folders, executed an regclean, and installed the SP3 for Windows XP. Then, installed everything again, and no erros where found.

If any problem occurs in the next few days, I'll post here.

Thanks.

Hi,

I would like to do the same configuration too. i.e. setup a 1st internal liveupdate server to get the updates from symantec server. A 2nd liveupdate server at a smaller site to get the update from the 1st internal liveupdate server. I managed to setup the former but I do not know how to setup the 2nd internal liveupdate server to get the update from the 1st one. Can you share with me how you set it up?

Thanks!

Hello!

Well, it's pretty simple.

I'm guessing that you already have one server working.

After install the second server on the smaller site, and configure all the options, go to the "CONFIGURE" option, and go to the "SOURCE SERVER" option.

Erase all the sources that are there, and add a new one with the address of your first server. I preffer to use static IPs instead names to prevent errors.

I make the same configuration on all the servers, except for the source server and for the times of download and distribuition tasks, that run first on my primary LUA Server and some time later on the others.

Cya!

Theles

Hi,

Thanks for the information. The documentations are not very clear on how to configure the source server. After much tries, finally manage to get it working... :)