Endpoint Protection

 View Only
  • 1.  Help: My SEPM MR 7 Cannot Update from LUA Symantec.com

    Posted Nov 08, 2011 12:14 PM

    Dear All

    I have problem my SEPM MR 7 Cannot update from LUA.  In the dashboard panel latest symantec version is up to date, but in latest manager version not update. i have proxy for link to internet. If JDB my SEPM up to date. in download status i have message error " Liveupdate encountered one or more errors. Return code = 4.

    I need solution for my problem.

    i attach picture for my problem

     

    Thanks before

    Helmy



  • 2.  RE: Help: My SEPM MR 7 Cannot Update from LUA Symantec.com

    Broadcom Employee
    Posted Nov 08, 2011 01:58 PM

    You will want to take a look in the log.liveupdate on the SEPM for possible clues as to why LiveUpdate is failing.

    LiveUpdate and content troubleshooting for the Symantec Endpoint Protection Manager

    http://www.symantec.com/business/support/index?page=content&id=TECH105924



  • 3.  RE: Help: My SEPM MR 7 Cannot Update from LUA Symantec.com

    Posted Nov 08, 2011 03:03 PM

    Hello Helmy this might help

    Sometimes, it is noted that if there are corrupt virus definitions downloaded by SEPM, it is required to clean them up and download the virus definitions again.

    Following are the steps for the same:

    File system cleanup for 32-bit SESC Virus Definitions:

    1. Stop SEPM server service.

    2. Go to C:\program files\symantec\symantec endpoint protection manager\Inetpub\content\{C60DC234-65F9-4674-94AE-62158EFCA433}" folder and move all of the subfolders to another place, such as C:\Temp if you want a backup, otherwise delete the sub-folders.

    Database cleanup for 32-bit SESC Virus Definitions:

    3) Go to C:\Program Files\Common Files\Symantec Shared\SymcData\ and delete the following folders:
    sesmipsdef32
    sesmipsdef64
    sesmvirdef32
    sesmvirdef64

    4)In the registry, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps.
    Delete these keys
    SymcData-sesmipsdef32
    SymcData-sesmipsdef64
    SymcData-sesmvirdef32
    SymcData-sesmvirdef64

    5). In the registry, navigate to and delete the following keys:

    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmipsdef32
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmipsdef64
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmvirdef32
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmvirdef64

    6). Start the SEPM service back up.

    7). Run Live update from within the Symantec Endpoint Protection Management console

    This will re-populate the database which in turn will update the moniker folders.



  • 4.  RE: Help: My SEPM MR 7 Cannot Update from LUA Symantec.com

    Posted Nov 08, 2011 03:16 PM

    ...or updating with the JDB would likely not work either.

    You said: "i have proxy for link to internet."

    Make sure the proxy information appears correctly in the SEPM. See: "How to setup the Symantec Endpoint Protection Manager to use specific proxy settings for LiveUpdate" (http://www.symantec.com/docs/TECH102335)

    sandra



  • 5.  RE: Help: My SEPM MR 7 Cannot Update from LUA Symantec.com

    Posted Nov 09, 2011 05:06 AM

    Hi Helmy,

    Your screenshot shows that the Security Response panel in the SEPM is receiving data from the Internet.  Can the SEPM not also access Internet-based LiveUpdate source servers?

    LUA 2.x is a fantastic tool, but in an all-SEP environment where the SEPM has access to the Internet, it is not usually necessary.  SEPM can download and distribute materials all by itself.  The following article provides some information:

    When is it Recommended to Use LiveUpdate Administrator 2.x with Symantec Endpoint Protection?
    Article: TECH154896 | Created: 2011-03-07 | Updated: 2011-08-17 |
    Article URL http://www.symantec.com/docs/TECH154896

    If you have a situation where LUA use is necessary (several SEPMs receiving their defs from the one LUA server, for instance) then the log.liveupdate will definitiely hold the key to understanding the nature of the failure.

    Hope this helps!