Endpoint Protection

On SEPM, we know we can caculate the delta updates based on revision that stored on SEPM, the delta updates files will be named as xxxxxxx.dax.

Now, there are same configuration on LUA, we can keep less than 10 revision or 31 days revision on LUA manager folder, Does anyone know how to understand the those revision file ? what is usage of them?

Thanks

Zhanping

Hi Zhanping,

Can you clarify what exactly you are trying to do-?  It sounds like you are trying to save disk space by lowering the number of revisions that are kept on the disk by LUA 2.x.

I recommend leaving that value at its default.  Here's the details from the Admin Guide:

All updates in the Manage Updates folder, except for the latest three revisions,
are set to be purged daily by default. However, you can specify rules for the Manage
Updates folder purge to determine which updates to delete, based upon the age
of the revision or when the updates were initially downloaded. For example, you
can purge updates older than 10 revisions back or purge the updates that were
downloaded more than 10 days back.

Note: Even with a single content update revision, LiveUpdate Administrator can
typically provide incremental content updates to connecting clients that have
content outdated for up to 12 months.

Typically, Symantec recommends that you configure LiveUpdate Administrator
to store no more than three update revisions. The primary reasons are to ensure
that it is possible to rollback to a previous version of content in the unlikely event
of corrupted content or a false positive, while also minimizing disk space usage.
A purge does not delete the latest revision even if it satisfies the purge rule. For
example, a revision may be more than 10 days old, but it is not deleted if it is the
latest revision.

Additionally, here are two content-related LUA 2.x "ideas" (enhancement requests) that you may wish to support:

https://www-secure.symantec.com/connect/idea/liveupdate-administrator-2x-improved-update-management

https://www-secure.symantec.com/connect/idea/hit-counter-page-liveupdate-administrator-2x

Hope this helps!

Thanks and best regards,

Mick

Hi.

I agree with Mick2009. What exactly are you trying to achieve? Why do you need to understand the file naming convention? Are you trying to do a manual cleanup? There are a lot of people complaining in the forums about large disk usage.

I do believe you are looking for the Symantec Definition Decoder available from https://www-secure.symantec.com/connect/downloads/symantec-definition-decoder-mikes-tool-set. Then again, this asks for AV definitions, but the naming convention is the same; I believe.

I seem to recall a VBscript that would do that for you, but can't find it right now. I remember it being an actual TECH article.