Endpoint Protection

 View Only

  • 1.  LiveUpdate be configured to use static IP addresses

    Posted Jan 26, 2012 12:56 AM

     

    HI i want to know only for my knowledge can we will be able to configure Live Update  use static IP addresses ?



  • 2.  RE: LiveUpdate be configured to use static IP addresses
    Best Answer

    Posted Jan 26, 2012 01:00 AM

    Can LiveUpdate be configured to use static IP addresses?

    Article: TECH97397  |  Created: 2009-01-12  |  Updated: 2011-11-11  |  Article URL http://www.symantec.com/docs/TECH97397
      Problem

    I want/need to configure LiveUpdate to use a specific, static set of IP addresses to obtain LiveUpdate content, rather than referencing a DNS name. How can this be accomplished?

    Symptoms

    The DNS names which reference LiveUpdate content on Symantec servers, including liveupdate.symantec.com and liveupdate.symantecliveupdate.com, resolve to dynamic lists of IP addresses. There seems to be a pattern to the change, so there must be a way I can determine which IP addresses to use.


     


    Cause


    The servers and IP addresses associated with distribution of LiveUpdate content are subject to change at any time, without notice, in order to facilitate efficient content distribution. Many of the factors which influence change are dynamic, so even if there is an observable pattern currently there is no guarantee it will continue in the future.

     


    Solution


    Symantec recommends specifying Symantec LiveUpdate servers via DNS name (fully qualified domain name), not via one or more static IP addresses. Use of static IP addresses to access Symantec LiveUpdate content is not supported or recommended.

    Some possible alternate methods of addressing this objective include whitelisting the server(s) downloading LiveUpdate content at the network perimeter, or locating an internal LiveUpdate server (LiveUpdate Administrator 2.x) outside the network perimeter.  LUA 2.x will download contents from Internet sources, then provide these materials to clients on the network from a Distribution Center with a fixed internal IP. 



     


    /apps/media/inquira/resources /resources
     

    Related Articles



     

    Legacy ID


    2009111208430348

     


  • 3.  RE: LiveUpdate be configured to use static IP addresses

    Posted Jan 26, 2012 04:45 AM

    If there is a very tight security requirement (only one IP able to be opened in a firewall, for instance) then setting up a LiveUpdate Administrator 2.x server ineternally is an option.  The LUA 2.x server will retrieve the definitions from the Interent source servers (using DNS/different IP's) and then host them internally at one fixed address.

    Hope this helps!