Endpoint Protection

Hello,

I have a customer who would like to use a GRC.DAT file to configure Jave LiveUpdate.

SAVFL does not appear to be picking up the correct LUA server address as the logs indicate that Java LiveUpdate is trying to reach Symantec LiveUpdate Instead of the internal LUA server that I configured in the GRC.DAT file.

The process as I understand it is as such:

1. Configured LiveUpate setting with ConfigEd.exe

2. Copy the GRC.DAT file to /var/Symantec

3. Restart SAVFL service: /etc/init.d/rtvscand restart

        -The GRC.DAT file will be imported into the SAVFL database and be deleted.

4.Run /opt/Symantec/Symantec_antivirus/sav liveupdate -u

        -The virus definitions should now be updated.

I have two sources for this procedure:

        - http://www.symantec.com/connect/articles/sav-linux-somewhat-illustrated-guide-part-2

        - http://www.symantec.com/business/support/index?page=content&id=TECH93386

Can you confirm that the process outlined above correct? Has anyone had this work?

Cheers,
Cameron

check this link

 How would I configure Symantec Antivirus for Linux (SAVFL) to download definitions from the Distribution Center (DC) of an internal LiveUpdate Administrator (LUA) 2.x server?

http://www.symantec.com/business/support/index?page=content&id=TECH93505

Hi Pete,

I had originally configured with a liveupdt.hst file. I was try to find a simpler way to configure both LiveUpdate and reporting which is why I was using a GRC.DAT file.

At a high level what would you suggest to use to configure LiveUpdat and reporting?

Cheers,

grc.dat can be used, since if it's only for LU you may want to check the link and try to imlement and know the final results.

Hi Cameron,

I doubt you'll have much luck picking up the SAVFL Reporter configuratin via GRC.DAT.  SAVFL Reporter was invented after GRC.DAT and uses its own reporterd.ini for configuration.  Here's an article with full details on SAVFL Reporter:

SAV for Linux: A (Somewhat) Illustrated Guide Part 4: SAVFL Reporter
https://www-secure.symantec.com/connect/articles/sav-linux-somewhat-illustrated-guide-part-4-savfl-reporter

To configure SAVFL clients toward the internal LUA 2.x server, I recommend creating and re-using a liveupdate.conf file.  Full details can be found in: 

https://www-secure.symantec.com/connect/articles/sav-linux-somewhat-illustrated-guide-part-3    

Some good news: having these things configured from the SEPM / managed SEP for Linux clients are on the roadmap.  Current plans are that they will be available in 2014, though of course that can change.

Hope this helps!  &: )

Mick

Hi Mick. I will give this a go.

Cheers,

Hello all,

I configured liveupdate.conf and reporterd.ini directly. GRC.DAT would not work correctly.