Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

LiveUpdate failed on Symantec Endpoint Protection SmallBussiness Edition 12.1.2015.2015

Created: 13 May 2013 • Updated: 19 May 2013 | 16 comments
This issue has been solved. See solution.

Hi !

 

When I start  LiveUpdate   on main menu  Symantec Endpoint Protection Small Business Edition 12.1.2015.2015,

on server computer  I get :

 

LiveUpdate failed . [Server: Srv]

 

 

 

Help please .

Operating Systems:

Comments 16 CommentsJump to latest comment

.Brian's picture

This happens when you run manually or via the schedule that you've set? What happens if it runs automatically?

You can try re-installing LU

LiveUpdate fails immediately when run from the Symantec Endpoint Protection Manager console.

Article:TECH173571  |  Created: 2011-11-03  |  Updated: 2013-03-13  |  Article URL http://www.symantec.com/docs/TECH173571

 

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

technical_specialist's picture

post the log.liveupdate from the SEPM server.

 

 

"Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager

Article:TECH103112  |  Created: 2007-01-17  |  Updated: 2012-07-17  |  Article URL http://www.symantec.com/docs/TECH103112

 

Semuser's picture

14 май 2013г.16:56:42 VLAT:LiveUpdate failed.[ Server: srv]

14 май 2013г.16:56:42 LUALL.EXE finished running.[ Server: srv]

14 май 2013г.16:56:42 VLAT:LiveUpdate encountered one or more errors. Returncode= 4.[ Server: srv]

14 май 2013г.16:56:41 VLAT:LUALL.EXE has been launched.[ Server: srv]

14 май 2013г.16:56:40 VLAT:Download started.[ Server: srv]

 

 

 

 

Mithun Sanghavi's picture

Hello,

LiveUpdate encountered one or more errors Return code = 4 is a Generic Error.

  • Are you using any proxy?
  • Is the SEPM server machine connected to internet?
  • Are you able to browse the below websites:

http://liveupdate.symantecliveupdate.com
http://liveupdate.symantec.com
ftp://update.symantec.com/opt/content/onramp

  • Make sure you are using Liveupdate version 3.3.1.23- nothing earlier!

Windows LiveUpdate Client for Use with Symantec Endpoint Protection Manager 12.1

http://www.symantec.com/docs/TECH181305

  • Also, check the Proxy settings in SEPM 12.1 if they are correct?

How to Update the Proxy settings in the Symantec Endpoint Protection Manager (SEPM) 12.1

https://www-secure.symantec.com/connect/articles/how-configure-proxy-settings-symantec-endpoint-protection-manager-sepm-121

For further Troubleshooting, Could you please upload the log.liveupdate?

Log.liveupdate is located in :

Windows 2003: C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate

Windows 2008: C:\ProgramData\Symantec\LiveUpdate

That would help us understand the root cause of the issue.

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Semuser's picture

Hi ,

 

I see my Log.LiveUpdate.

Date my Log.LiveUpdate is 11.02.2012

Last record in log  with date : 2/11/2013,

 

2/11/2013, 17:02:04 GMT -> EVENT - PRODUCT UPDATE SUCCEEDED EVENT - Update available for SEPM Iron Whitelist 12.1 RU2 - MicroDefsB.CurDefs - SymAllLanguages. Update for CurDefs takes product from update 130208004 to 130211004. Server name - liveupdate.symantecliveupdate.com, Update file - 1360589274jtun_iron2012_130208004.irn, Signer - cn=Symantec Corporation,ou=Locality - Culver City,ou=Product Group - LiveUpdate,ou=SymSignature 2005,o=Symantec Corporation, package install code 0. The Update executed with a result code of 1800, => ???????
2/11/2013, 17:02:04 GMT -> EVENT - PRODUCT UPDATE SUCCEEDED EVENT - Update available for SEPM Iron Revocation List 12.1 RU2 - MicroDefsB.CurDefs - SymAllLanguages. Update for CurDefs takes product from update 130211004 to 130211008. Server name - liveupdate.symantecliveupdate.com, Update file - 1360598141jtun_irev130211004.7z, Signer - cn=Symantec Corporation,ou=Locality - Culver City,ou=Product Group - LiveUpdate,ou=SymSignature 2005,o=Symantec Corporation, package install code 0. The Update executed with a result code of 1800, => ???????
2/11/2013, 17:02:04 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Silent Mode. LiveUpdate found 12 updates available, of which 12 were installed and 0 failed to install.  The LiveUpdate session exited with a return code of 1800, ???????
2/11/2013, 17:02:05 GMT -> IE8 support.
2/11/2013, 17:02:05 GMT -> The callback proxy executable for product {E031872C-0AB4-F6D4-0039-BF122A32714F} is exiting with no errors
2/11/2013, 17:02:06 GMT -> ***********************           End of LU Session           ***********************
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
 

It seems that something is not working.
What else to try?

I have been working without a proxy.
Brendmauer open.
Internet protocol works.
Download sites open well.

Mithun Sanghavi's picture

Hello,

Could you please Restart the Server machine and then run a Repair of Symantec Endpoint Protection Manager from Add/Remove Programs.

In case you are either running the Windows 2008 / Windows 7 / Windows 8, I would request you to Turn off / disable the Windows Defender and User Account Control (UAC) and restart the machine again.

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Semuser's picture

When I do:

Symantec Endpoint Protection 12.1

  1. Open a command window, then browse to:
    C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
  2. Type lucatalog -cleanup and press Enter.
  3. Type lucatalog -forcedupdate and press Enter.
  4. Run LiveUpdate to verify that there are no errors.

After this procedure, the error  =4  still remains:

Chetan Savade's picture

Hi,

Have you tried to reinstall liveupdate?

Reinstall liveupdate and re-register with the Symantec Endpoint Protection Manager (SEPM).

This error can be caused for different reasons including, but not limited to, the following:

  1. Internet access is being blocked by a proxy server. (Please see the Technical Information section of this document for steps to configure Liveupdate for use with a proxy)
  2. Symantec Endpoint Protection Manager is trying to connect to an internal LiveUpdate server and the URL supplied to LiveUpdate is not correct.
  3. Enhanced Security is enabled in Internet Explorer (Please see the Technical Information section of this document for steps to disable IE Enhanced Security)
  4. A firewall that requires authentication to get to the internet is used.
  5. The Symantec Endpoint Protection Manager is no longer registered with LiveUpdate.
  6. A Web filtering device detects and blocks certain items.

Reference: Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH103112

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Chetan Savade's picture

Hi,

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Chetan Savade's picture

Hi,

You can mark any of the above comment as a solved which you think helped to resolve the issue.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<