So I understand, in the SEPM, you see Return Code = 87, and launching LiveUpdate manually (via LUALL.exe?) brings the LU 1825 error up?
All I can find for seeing the "Return Code = 87" message in the SEPM relates to the System account having incorrect or invalid proxy info (unfortunately I have no public documentation to link). The LU 1825 error document discusses some things you've already done, plus repairing the SEPM installation.
Title: 'LU 1825 : Antivirus and spyware definitions Win32 :Failed to update'
Document ID: 2009081007232948
> Web URL: http://service1.symantec.com/SUPPORT/ent-security....
(Which update is it failing on, or is it all of them?)
Do you work locally at your server, or through a remote connection? If remote, is it a console session? In my experience, things working AOK then suddenly and mysteriously failing with no other changes made usually comes down to non-console RDP; i.e. temp files from the session finally get purged or the session is disconnected (I've heard of sessions persisting for up to a year). Repairing the SEPM installation while local or with a console session usually resolves RDP related issues.
Title: 'How to install or manage Symantec AntiVirus and Symantec Endpoint Protection components through Remote Desktop'
Document ID: 2008030509272248
> Web URL: http://service1.symantec.com/SUPPORT/ent-security....
Hope this helps,