Endpoint Protection

Hi,

We are observing that our CORP LUA servers are failing at 99% of download every time.

Is there any common issue identified recently in LUA signature download ? Please confirm.

LUA version : 2.3.2.99

Attached screenshot

Check this articles and check LUA liveupdate settings

LiveUpdate Administrator 2.x Server Connection Recommendations

https://www-secure.symantec.com/connect/articles/liveupdate-administrator-2x-server-connection-recommendations

Hi,

Please check this.

https://www-secure.symantec.com/connect/forums/lua-distribution-fails-every-time

https://www-secure.symantec.com/connect/forums/lua-22113-fails-download-updates

Hi Prakash8,

Can you add details regarding when this problem started, and whether or not the server has had its connection settings tuned as per https://www-secure.symantec.com/connect/articles/liveupdate-administrator-2x-server-connection-recommendations
?

Also, what products are being downloaded by these tasks?

Many thanks in advance!

Good news- Symantec has been researching this issue, and now have a workaround to share.

Please note that this failure to download will affect only customers who are using LUA 2.x to download IPS definitions, and that the error only affects IPS definitions.  The LUA 2.x server is downloading and processing AntiVirus, SONAR, etc contents correctly.

Details can be found in the following article:

LiveUpdate Administrator 2.x Download tasks fail at 98% or 99%, "Failed to commit and move updates" - "a different object with the same identifier value was already associated with the session"
Article URL http://www.symantec.com/docs/TECH211068  

I will update this thread when a permanent resolution to this is available. Many thanks!

Hi,

Thumbs up to the above advice.

In case going to log a case with the support then keep the following data ready to share with them.

1. luadebuginfo.zip
2. sdbz from each LUA server
3. The exported LUA Event Logs (export as CSV from the Event Log section in LUA)
4. The exported config file (export as zip from the 'Configure' section in LUA)

Details on how to gather those can be found in:
Gathering logs and troubleshooting data from LiveUpdate Administrator 2.x
http://www.symantec.com/docs/TECH92654

Hello,

Agreed with above comments. Thumbs up to both. 

This developing issue is currently under investigation by Symantec. 

A workaround is to temporarily remove (uncheck) the SEP 12.1 and/or SEP 12.1 RU2 IPS definitions component from the scheduled LUA 2.x download task. This will allow the download task to complete and then the updates to commit.

Reference:

LiveUpdate Administrator 2.x Download tasks fail at 98% or 99%, "Failed to commit and move updates" - "a different object with the same identifier value was already associated with the session"

http://www.symantec.com/docs/TECH211068

Hope that helps!!

Good news- the issue has been resolved.  LiveUpdate Administrator 2.x has been confirmed to correctly download, process and distribute the content updates currently available from Internet source servers.

If IPS definition have been unchecked as a workaround, please re-enable their download and distribution now.  IPS are a crucial and effective defense against many of today's threats.

Thanks for the update Mick. Enabled IPS back and downloading now.

cheers

Prakash

Hi,

Thubms up to the above advices and quick updates.

Enable CIDS content and verify the issue is fixed.