Endpoint Protection

Hello,

I am confused with the way Live Update works on SEPM 11.0.7200. Under Admin - Servers - Local Site properties I have Live Update frequency set to Weekly and specify the date and time I want updates downloaded to the management server. But, when I go to my Clients section and look at the LiveUpdate Settings policy that is assigned to every group in the Clients list Use the Default Management Server is checked and the schedule is set to the default of every 4 hours and it's all greyed out so I can't change it. I also see this under the Policies section where I have just one LiveUpdate Settings policy defined. Where is it getting these settings from? I thought the way I mentioned above was the proper way to set LiveUpdate settings. I need to change this to weekly. Lately I have had issues with servers and CPUs getting pinned to 100% by LiveUpdate.  

In your LU policy, click on the Schedule tab. Should be here is where clients take that from

What you set was the schedule for LiveUpdate to run on the SEPM.

The actual LU policy is for the clients

Brian81. Thanks for the quick response. That's what I thought but why is everything greyed out on my LU policy? I can't change anything.

On the Server Settings tab, the option "Use a LiveUpdate server" needs to be checked.

Than go to the Schedule tab and now you can make changes

I see that but wouldn't this not use my SEPM server? Wouldn't these settings direct clients directly to Symantec LU sites?

If you go back into the Schedule tab and as long as you do not check "Enable LiveUpdate Scheduling" they won't go out to LiveUpdate than

I see that but then how do I change the scheduling to weekly? The only way to get all of the options to not be greyed out is to check Enable LiveUpdate Scheduling.

* But, when I go to my Clients section and look at the LiveUpdate Settings policy that is assigned to every group in the Clients list Use the Default Management Server is checked and the schedule is set to the default of every 4 hours and it's all greyed out so I can't change it.

...if you use only the "Use the Default Management Server" option the SEP clients will download the updates only from SEPM according to their heartbeat (pull mode) or constantly- as soon as the updates are being available on SEPM (push mode). There is no way to schedule the clients updates when only the default management server is set as source of updates - thats why you see the schedule greyed-out and this way as well disabled.

- The liveupdate update schedule for SEP clients can be onlcy activated for downloads from internet liveupdate symantec servers or internal LUA server - so the "Use a LiveUpdate Server" option.

I'm confused. You want your clients to not go out to LiveUpdate, correct?

If true, than you can leave this greyed out as it already is.

Your clients will than connect to and get updates from the SEPM based on the current heartbeat. It is currently not possible to schedule content updates from the SEPM.

The SEPM downloads the updates, when the clients check in according to its heartbeat, they begin the process of updating. No way to schedule this, is just happens automatically.

Exactly what I was looking for. Ok, so I need to bypass the SEPM server. Thanks for clearing that up.

Well if you need the schedules for client updates to run only on specified times then yes. Getting it from SEPM will be regulated either by pull (heartbeat) or push mode - with no real control over it from your side.

Well, I wanted to us SEPM server but also wanted to schedule it. SebastianZ and you have made me understand now that is not possible. Thanks for the help. I will use the LiveUpdate site so I can create schedules.  

There have been already several ideas posted on the forum regarding the possible implementation of the scheduled downloads from SEPM - you can support these as well if you want:

https://www-secure.symantec.com/connect/ideas/scheduling-time-update-sep-manager

https://www-secure.symantec.com/connect/ideas/live-update-setting-clients

https://www-secure.symantec.com/connect/ideas/schedule-update-sepm-group