Here's a strange one:

I have two SEP11 SEPMs running in one site, and both obtain virus content from internal Liveupdate servers.

When the SEPMs were originally built they had a SAV10 client installed.  They then had SEPM and a SEP11 client installed, which removed the SAV10 client.

However...one of the SEPMs is not downloading content from the Liveupdate servers.  The reason appears to be that the Liveupdate settings file still has the path used by the SAV10 client (c:\programdata\symantec\liveupdate\settings.liveupdate)

the relevant section being:

HOSTS\0\ACCESS=\\"oldservername"
HOSTS\0\ACCESS2=\\"oldservername"

So..can I fix this by just copying the Hosts lines from the settings.liveupdate file on the working SEM, or is it more involved than that?

Thanks

check this link

How to configure LiveUpdate to use alternate sources through the Symantec Endpoint Protection Manager Console

Thanks for that Pete, but that's the strange part - the Liveupdate servers are already confgured in the SEPM console, but for some reason this SEPM is ignoring those settings.

can you try reinstallg LU and verify if it fixes the issue?

Hello,

Try uninstalling the Liveupdate and Reinstall Liveupdate and not restoring the Settings.LiveUpdate and Product.Inventory.LiveUpdate files.

Check this Article: http://www.symantec.com/docs/TECH102609

Also check this Article:

A Symantec Product is Configured to Receive Updates from an Internal LiveUpdate Server that has been Decommissioned

http://www.symantec.com/docs/TECH155625

Hope that helps!!

I have had a play on a test SEPM and it looks like we are on the right track.  I deleted settings.liveupdate, restarted the SEPM service and then ran liveupdate from the SEPM.  This created a new settings.liveupdate file with the corect LUA settings, so I will try that next on the production SEPM.

Thanks for all the suggestions.

Hello,

I would appreciate if you could mark an appropriate comment as "Solved" which assisted you the best.

Thank you.

One thing in the support article I don't understand - hopefully someone can shed some light...

http://www.symantec.com/business/support/index?page=content&id=TECH102609

It says

Note: If you did not back-up the Settings.LiveUpdate file before deleting the LiveUpdate folder you must reconfigure the LiveUpdate proxy settings in the SEPM to make the changes propagate back down to LiveUpdate.

I suspect the Settings.LiveUpdate file is the cause of my issue, so will probably not restore it.  What Liveupdate proxy settings is the Note referring to - the settings in the Liveupdate client or the Liveupdate source servers that are specified in the SEPM under Admin, Servers, Site Properties?

I can't think of a reason why the settings in the SEPM should be affected by this.  Any advice please?

Hello,

You are correct, these are referring to the SEP Client Liveupdate settings policy within SEPM.

Secondly, the Article you are referring to is refering to the SEP 11.x.

For SEP 12.1, check this Article:

http://www.symantec.com/docs/TECH171060