Endpoint Protection

We have a standalone network that does not connect to the Internet. We installed Symantec Endpoint Protection Manager 11.0.3001.2224. I pushed out the package to the clients and now they are managed. When I run LiveUpdate on the clients I get an error:

Connecting to (My local server name)
Unable to connect to host
LU1814: LiveUpdate could not retrieve the catalog file of available Symantec product and component updates.

I did update the server with the latest .jdb virus definition file and also ran the sylink tool on the client. My Windows firewall is off. What could be the problem?

HI,

We have a standalone network that does not connect to the Internet:-- When I run LiveUpdate on the clients I get an error:
SInce the the liveupdate talk to Symante liveupdate for content download the error is seen. If the client is provided internet then you will not get the error.

Though you may have configured the sep client to get the update form SEPM, if you initiate the LU then it tries to connect to SYmantec SIte for content download.

Pete!

Oh, then is there a way to push out the latest virus definitions to the clients? I don't want to go to each computer to run the update.

On the SEP Manager open LiveUpdate Policy, Server Settings and choose Use the default management server

Hi,

if the Manager is updated and the clients are properly connected to Manager, they automatically get the latest definitions.
There is a command "update content in the clients" but this is useless because the mechanism is the same, therefore, if the automatic deployment of updates does not work, the command will fail as well for sure.

Step by step troubleshooting:

1) is the Manager really updated? In the console of the Manager > admin > server > local site > "show liveupdate downloads", are the AV definitions updated?

2) are the clients properly connected to the Manager? in the client, double click on the yellow shield > help and support > troubleshooting, are you reading the IP or the hostname of your server in the field "server"?

Cheers,

I have both checked, Use the default management server and Use a LiveUpdate server. Under the LiveUpdate server I have Use a specified internal LiveUpdate server checked and have my internal server name added. Is this correct? Non of us has ever configured this antivirus before.

I checked both.

1. Yes the AV definitions show Revision 2009-05-13 rev.003

2. Under Management it shows my server name next to Server.

looks like the definition might have corrupted, download jdb file on one of the client machine and see if it gets update.

Pete!