Hi everyone!

I had an issue about how to create a internal update from SEP manager 12.1

I want to create a local update not going to Symantec server because it reduce the bandwinth

And I want to update thought LAN network.

Many thanks!

You can set "Use the default management server" to Downloads the updates from the Symantec Endpoint Protection Manager,

Make the following change to the LiveUpdate policy:

Policies > LiveUpdate > LiveUpdate Settings policy > Edit the policy

By default, "Use the default management server (recommended)" is checked,uncheck "Use default Symantec LiveUpdate server

How client computers receive content updates

Managing content updates

The point is do not know to config internal liveupdate.

Example I have server A and it have SEP 12.1 manager, I have client as win 8.1 and I want this client connect to the server A to get update virus file, not going to liveupdate.symantec.com download update file

You can set "Use the default management server" to Downloads the updates from the Symantec Endpoint Protection Manager,

Make the following change to the LiveUpdate policy:

Policies > LiveUpdate > LiveUpdate Settings policy > Edit the policy

You can uncheck "Use a LiveUpdate server" in SEPM live update policy

Symantec Endpoint Protection Manager - LiveUpdate - Policies explained

In your LiveUpdate policy make sure you uncheck "Use a LiveUpdate server" and only use the default management server, see here:

Hi Brian,

If I only update the SEP manager, will SEP manager delivering update parkage to SEP client?

Yes

Hi Brian,

when I use the update management only, client liveupdate turn into gray button and can not update.

and client virus database not updating!!!

Does SEPM having updated latest defination ?

Does sep client received latest policy ?

Troubleshoot LiveUpdate and definition issues with Endpoint Protection Manager

Symantec Endpoint Protection: LiveUpdate Troubleshooting Flowchart

That's because you need to enable the option to allow the end user to run LiveUpdate from within the policy. This is under the Advanced Settings tab within the LU policy. Make sure "Allow the user to manually laucnh LiveUpdate" is checked

I cannot enable the option allow the end user to run LU because it turn into gray when I unable use the default server management.

That's because you need to check the box for "Use a LiveUpdate Server" in your policy above.

I need to configure internal update where client going to manager to take the update package, not going to symantec server to take the update package!!!

If I check the box use a liveupdate server then client going to symantec server (liveupdate.symantec.com) to take the packege

when I stick to the box use the update server then how to fill out this box??

especially URL?

Then you won't be able to select LiveUpdate from the client. There is no need to since you don't want to go out to Symantec LU servers.

And no, not technically. You would still need to configure a schedule. But regardless, since you're not using Symantec LU, those options are greyed out.

And even if you setup an Internal LUA, those options are still greyed out

See here:

Install and configure LiveUpdate Administrator (LUA)

This is to setup an internal LiveUpdate server. Do you have one? If so, follow this guide:

Install and configure LiveUpdate Administrator (LUA)

Otherwise your clients just get their updates from the SEPM

Hi Brian,

I manage to sharing the Download folder on this location 

c:\Program Data\Symantec\Live Update\Download

and adding this location to Internal Update URL then client can update thought this Download folder.