Endpoint Protection

When going through the SEP Manager, and going to Admin -> Servers -> Download Liveupdate I ALWAYS get a "LiveUpdate encountered one or more errors. Return code = 4." so nothing is automatically updated.  If (from the very same compter) I run luall.exe or open up the client and click the LiveUpdate button - updates download no problem and everything works fine (the updates go to the manager, and the manager can then push those updates out, but I have to manually do the live update).  I'm not using a proxy server, and this is a Windows 2003 + XP environment.

I've tried uninstalling/rebooting/reinstalling, and that didn't work.
I've also tried the suggestions listed http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100907303548?Open&seg=ent and http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/3b09d4f329acc39fc12573b400341977?OpenDocument to no avail. 

Any ideas on how to fix this?  It's driving me crazy!

hi,

you may check to look into log.liveupdate for the error.

Try updating the SEPm with the JDB file and post that try updating the SEPM.

Let us know how it goes!!

Pete!

Updating with the .jdb files works fine, and I've already updateded to the latest SEPM (at least the latest I can see on the fileconnect site, my version is 11.0.1014.26).

As far as the log file goes, this is what it says (if I go to the URLs specified on the same machine, I get the page no problems):

3/27/2009, 14:34:49 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantec.com/liveupdate_3.3.0.78_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
3/27/2009, 14:34:51 GMT -> CSendHTTPRequest::SendRequest - Unable to connect to the server.
3/27/2009, 14:34:51 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantec.com/liveupdate_3.3.0.78_english_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\liveupdate_3.3.0.78_english_livetri.zip" HR: 0x802A0045
3/27/2009, 14:34:51 GMT -> HR 0x802A0045 DECODE: E_UNABLE_TO_REACH_SERVER
3/27/2009, 14:34:51 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x802A0045, Num Successful: 0
3/27/2009, 14:34:51 GMT -> HR 0x802A0045 DECODE: E_UNABLE_TO_REACH_SERVER
3/27/2009, 14:34:51 GMT -> EVENT - SERVER SELECTION FAILED EVENT - LiveUpdate failed to connect to server liveupdate.symantec.com at path  via a HTTP connection. The server connection attempt failed with a return code of 1814, LiveUpdate could not retrieve the catalog file of available Symantec product and component updates.
3/27/2009, 14:34:51 GMT -> Progress Update: TRYING_HOST: HostName: "update.symantec.com" URL: "ftp://update.symantec.com/opt/content/onramp" HostNumber: 2
3/27/2009, 14:34:51 GMT -> Progress Update: DISCONNECT
3/27/2009, 14:34:51 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0    Downloading LiveUpdate catalog file
3/27/2009, 14:34:51 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.78_english_livetri.zip
3/27/2009, 14:34:51 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
3/27/2009, 14:34:51 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "IPWh6s1kTrhJTKdCsl5GyBMo5vk2uPMSQAAAAA" AccessType: 0x0      
3/27/2009, 14:34:51 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "IPWh6s1kTrhJTKdCsl5GyBMo5vk2uPMSQAAAAA" AccessType: 0x0      
3/27/2009, 14:34:51 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "ftp://update.symantec.com/opt/content/onramp/liveupdate_3.3.0.78_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
3/27/2009, 14:34:53 GMT -> CstInetGetFile::DoTransfer - Unable to connect to the server.
3/27/2009, 14:34:53 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "ftp://update.symantec.com/opt/content/onramp/liveupdate_3.3.0.78_english_livetri.zip", Full Download Path: "(null)" HR: 0x802A0045
3/27/2009, 14:34:53 GMT -> HR 0x802A0045 DECODE: E_UNABLE_TO_REACH_SERVER
3/27/2009, 14:34:53 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x802A0045, Num Successful: 0
3/27/2009, 14:34:53 GMT -> HR 0x802A0045 DECODE: E_UNABLE_TO_REACH_SERVER
3/27/2009, 14:34:53 GMT -> EVENT - SERVER SELECTION FAILED EVENT - LiveUpdate failed to connect to server update.symantec.com at path /opt/content/onramp via a FTP connection. The server connection attempt failed with a return code of 1814, LiveUpdate could not retrieve the catalog file of available Symantec product and component updates.
3/27/2009, 14:34:53 GMT -> Progress Update: HOST_SELECTION_ERROR: Error: 0x802A0027

Out of curiosity had you recently downloaded IE8 (beta, RC or release) on the server having issues? I only ask because I have a Server 2003 + Windows XP Prof. environment and I ran into the exact same issue after installing IE8 on the server. I am currently trying to verify if IE8 is in fact the cause, and if so, if there is a workaround/fix for it. One major difference is that I am using a proxy, but everything worked fine with IE7. May be coincedence, may not be...

Repair SEPm and re- register Lucatalog with SEPM.
Do you have any proxy.If yes then configure it in SEPM console.
Add
http://liveupdate.symantecliveupdate.com  to trusted sites.

This error is pretty common on servers if Enhanced Security is enabled in Internet Explorer.

Add liveupdate.symantec.com to your trusted sites and try again.

BR,
Tuomas

I have just confirmed that adding the liveupdate sites to trusted sites in ie8 resolved my customer's issue.
it seems that enhanced security denies the system account access to the internet.

Thanks,
Chris