Endpoint Protection

I'm trying to get my SEP 12.1 clients updated to latest RU2.

I have an internal LiveUpdate (Version: 2.3.1.82) server setup on my network which all my SEP clients have been updating from.

Everything works.  The Macintosh and Windows clients find the LUS and get updates as needed.

I recently updated my SEPM to latest RU2/12.1.2015.2015.

I have checked the checkbox: SEPM Live Update Policy Settings > Advanced Settings > Download Symantec Endpoint Protection product updates using a LiveUpdate server.

None of my clients are getting updated from version 12.1.1101.401 (Release), RU1 MP1 to RU2/12.1.2015.2015.

From what I can tell, I have the LiveUpdate Server setup correctly as it shows RU2 waiting to be downloaded by clients...

How best to troubleshoot.

You have correctly applied the policy to the group which the clients are in? Did they check in an receive the policy yet? Can you verify the policy on the clients matches the policy number in the SEPM?

Is the product update for 12.1 RU2 made available on LUA server? - where do you see it in waiting to be downloaded by clients?

One possibility is that something is being blocked on the firewall level - please have a look at :

http://www.symantec.com/business/support/index?page=content&id=TECH178257

... where it mentions the HTTP headers for Liveupdate connections.

I don't remember if I Assigned the updated policy yet when I clicked on my company and the clients listed underneath, the Advanced Settings > Product Update Settings > Download Symantec Endpoint Protection product updates using a LiveUpdate server are all checked.

I verified the settings and then Assigned the policy again and the policy serial number changed and I verified the Windows 7 client I'm testing on got the new policy.

The tray icon didnt have the green circle as the machine has been offline a bit, so I manually ran LiveUpdate and restarted.

Upon restart the client version remains unchanged.

On the Macintosh 10.8.2 client LiveUpdate shows everything up to date with client version 12.1.1000 (0157).

I think everything is set to go because clients are hititng my in†ernal Live Update server and getting all virus def updates, etc.

I thought I added 12.1 RU2 to be downloaded and distributed ,yet going back through settings it looks like it may not be available.

Under Manage Updates there isnt a green check mark under Distribution Coverage like there is in the Symantec Endpoint Protection v12.1 listing above it.

Symantec Endpoint Protection v12.1 RU2 Virus Definitions components have a bunch of red Xs with some green checks yet all of the Product Updates Components have red Xs...

And we don't have a firewall between the LiveUpdate Server and clients.

Thanks for any further assistance.

Make sure it can connect to the SEPM to pick up the policy.

Please add then the 12.1 ru2 content to appropriate Download and Distribution Schedule. Befora that make sure that the used Distribution Center has as well this product added. And finally it may be needed to update the Product Catalog of the Liveupdate Administrator as well.

Red-X in the Manage Updates section would mean that the selected product was not added to the selected distribution Center - here some screenshots were this can be added:

https://www-secure.symantec.com/connect/articles/configuring-distribution-center-lua

The only SEP for Mac version that "officially" supports OSX 10.8 is 12.1.2015 (RU2); if your SEPM is updated to 12.1.2015, export a new Mac install package from SEPM>Admin>Install Packages and overinstall on your Macs.

MJD

I'm just going to attach screens of  my setup.  I believe I've done everything correctly.  I guess I may have to bite the bullet and contact Symantec Support.

Thanks for any assistance.

Hi Layne,

You are trying to get the clients to upgrade their version, correct, rather than their AV definitions?  In the SEPM, just assign the SEP 12.1 RU2 install package to their client group.  They will "auto-upgrade" very reliably, if they are like the clients in my network.   There's no need to try to get the clients to download a patch from the LUA server. &: ) 

I have an internal LiveUpdate (Version: 2.3.1.82) server setup on my network which all my SEP clients have been updating from.

I definitely recommend upgrading to LUA 2.3.2, which is on the DVD for SEP 12.1 RU2.  Then, make 100% sure that you have the very latest Symantec Product Catalog in place on it.  Verify that it is "SEP 12.1 RU2 H" contents that this LUA server is making available.

Hope this helps- please keep the thread  up-to-date with your progress!