Endpoint Protection

Some of my clients are going to need to update from an internal LUA server. Is it a good idea to have 2 LUA servers for redundancy/failover? Or is there a way in SEP11 to say "if you can't reach this internal LUA server, use Symantec.com"?
Thanks!

In the Liveupdate policy you can configure the policy to connect to internet if LUA fails..however Multiple LUA will be a better Idea..as if all clients connect to the internet it will consume high bandwidth.

You can follow this. Chnage the Liveupdate policy accordingly


1. In the console, click the Clients tab.
2. Select the group to configure.
3. Click on the Policies tab at the top right.
4. Edit the Live Update Settings Policy.
5. Click Server Settings.
6. Check the box for Use a LiveUpdate server.
7. Select the radio button for Use the default Symantec LiveUpdate server.
8. Click Schedule.
9. Configure the schedule that is appropriate for the environment.
10. Click Advanced Settings.
11. Configure the advanced options as appropriate for the environment.
12. Click OK

Vikram-
How would I configure it to use Symantec.com as a backup?

Also, when using multiple LU servers, does a client use the first one on the list and then if it can't get to it, use the second? (If "Use a specified internetl LiveUpdate server" is checked)

I need the computers to use the Internal LU server first. And then if it isn't available, use Symantec.com. Not Symantec.com all the time.

You will need to configure in the following manner.

In the SEPM modify the LiveUpdate policy for your clients. Check to use a LiveUpdate server and click the radio button to Use a specified internal LiveUpdate server, then click the Add button.

Input your internal LUA URL and server name appropriately and click OK to save.

Now click the Add button once more and input the following:

Server Name: Symantec LiveUpdate Server

URL: http://symantec.symantecliveupdate.com

This should allow clients to failover to Symantec LiveUpdate. This will only work if they fail to connect to the internal LUA server however and not if there is simply no content to download.

Kurt-
So the list of LiveUpdate servers are sequential in the fact that the agent will try Server 1, then Server 2, etc?
Thanks!

I tried that URL and it doesn't work. Are you sure it's not this one?

http://liveupdate.symantecliveupdate.com

Thanks.

correct its
http://liveupdate.symantecliveupdate.com