Endpoint Protection

Hello, I am looking for some assistance in configuring live update for one of our client groups. For this group of machines, I would like to configure LiveUpdate to run and install new virus definitions at 3am only. I looked at the LiveUpdate policy and configure it to run every day at 3:30am and randomize start time by + or - 1 hour. I thought this is all that I would need to do but I still see virus definitions being installed on endpoints throughout the day.

Can someone please assist in configure liveupdate correctly so that it will only load new virus definitions at 3:30am and not at any other time of the day?

Did you create this policy and apply it to ONLY this group? You will need to remove inheritance on this group and apply just this policy.

Also, these machines are getting their updates from the Internet and not the SEPM or a GUP? What you configured is only to go out to a Symantec LiveUpdate server.

That setting would mean that your clients will go to internet for definitions.

clients cannot take from manager at particular time.You dont have that setting in SEPM. clients will download defs when they talk to the manager\

Quite possible that you have enabled both. clietns not able to go out to internet, hence getting from the manager.

post a screen shot of the liveupdate policy

So this is setup for machines to go out to Symantec LiveUpdate servers at 3:30. Is this what you want?

As already mentioned there is no way to set a schedule to get updates from the SEPM. They update after they check in.

Uncheck "use the default management server " and keep "Use liveupdate server " CHECKED

this would make the cleints to get the update only from Internet and NOT from SEPM.

Make sure they have internet access