Endpoint Protection

 View Only
Expand all | Collapse all

Need to verify how the live update is triggered on SEP Client

  • 1.  Need to verify how the live update is triggered on SEP Client

    Posted Aug 19, 2014 12:32 AM

    We Need to verify how the live update is triggered on SEP Client, either is it triggered manually by clicking on the Live update on the SEP GUI console or is it triggered automatically as scheduled ?

    Which log or whic settings will explain these results ?

    Thanks in advance !!

     



  • 2.  RE: Need to verify how the live update is triggered on SEP Client

    Posted Aug 19, 2014 12:39 AM

    Once SEPM server are updated latest virus defination,Sep client automatic updated next heartbeat setting.

    please see below Flowchart

    Symantec Endpoint Protection: LiveUpdate Troubleshooting Flowchart

    Article:TECH95790 | Created: 2009-01-26 | Updated: 2014-08-14 | Article URL http://www.symantec.com/docs/TECH95790

    How the LiveUpdate process works in Symantec Enterprise Security Manager

    Article:HOWTO50313 | Created: 2011-05-02 | Updated: 2011-05-03 | Article URL http://www.symantec.com/docs/HOWTO50313


  • 3.  RE: Need to verify how the live update is triggered on SEP Client

    Posted Aug 19, 2014 12:53 AM

    Check the article

    About LiveUpdate in Symantec Endpoint Protection version 12.1

    https://www-secure.symantec.com/connect/articles/about-liveupdate-symantec-endpoint-protection-version-121-0



  • 4.  RE: Need to verify how the live update is triggered on SEP Client

    Posted Aug 19, 2014 12:53 AM

    James,

    Thank you for reply!

    Scenario: The user had clicked on the Live update and updated the client.

    So as an SEP administrator, How to check the User had manually initiated the Liveupdae or the SEP client functions according to the live update schedule ?

    Thanks



  • 5.  RE: Need to verify how the live update is triggered on SEP Client

    Posted Aug 19, 2014 12:56 AM

    In SEPm console you can't find that INFO.



  • 6.  RE: Need to verify how the live update is triggered on SEP Client

    Posted Aug 19, 2014 01:09 AM

    Thanks Sumit,

    @ James - May I know what is the Option in SEPM, Can you please let me know the navigations

     



  • 7.  RE: Need to verify how the live update is triggered on SEP Client

    Posted Aug 19, 2014 01:12 AM

    There is no way find manually update sep client logs in SEPM

     



  • 8.  RE: Need to verify how the live update is triggered on SEP Client

    Posted Aug 19, 2014 01:18 AM

    This inofrmation is only avaialble in client system

    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\your version\Data\Lue\Logs



  • 9.  RE: Need to verify how the live update is triggered on SEP Client

    Posted Aug 19, 2014 01:26 AM

    Thanks Sumit & James

     



  • 10.  RE: Need to verify how the live update is triggered on SEP Client

    Posted Aug 19, 2014 01:50 AM

    In the entire Log.liveupdate, the monikers that are downloaded was logged but there is nowhere mentioned how the live update is triggered, either manually nor automatically.



  • 11.  RE: Need to verify how the live update is triggered on SEP Client

    Posted Aug 19, 2014 01:53 AM

    You can not find anywhere is client update manually or automatic.It's best if you grayout live update TAB in SEP client GUI.



  • 12.  RE: Need to verify how the live update is triggered on SEP Client
    Best Answer

    Posted Aug 19, 2014 08:17 AM

    You can see certain info in the SEPM for this. It does fail to tell you whether manual or automatic though.

    Go to the Monitors page

    Set your Log type to System

    Set Log content to Client Activity

    Select Advanced Settings

    Set the Event Source to LiveUpdate Manager

    Select View Log

    Capture_21.JPG