Endpoint Protection

 View Only

  • 1.  SEP for Linux Reporting tool package ?

    Posted Oct 26, 2011 02:23 AM

    Hi All,

    I have packaged installed and configured the SEP client using the SEPM Windows Server, but so far the only missing product is the Reporter tool ?

     

    From the LiveUpdate log on the client side, it tries to get the “linux_3.5_english_livetri.zip” file form the SEPM-Server.

     

     

    <IdsDownloadMsg><jlu$20linux_3.5_english_livetri.zip></2Ftmp/2F1319187620154/2Fjlu$20linux_3.5_english_livetri.zip>
    <IdsHttpConnectionMsg><SEPM-Server-VM><HTTP>
    <IdsHttpConnectedMsg><SEPM-Server-VM>
    <IdsHttpWaitingMsg>
    <IdsDownloadMsg><avenge$20microdefs25$20savcorp10$20linux_microdefsb.curdefs_symalllanguages_livetri.zip></2Ftmp/2F1319187620154/2Favenge$20microdefs25$20savcorp10$20linux_microdefsb.curdefs_symalllanguages_livetri.zip>
     
    Here is the liveupdate.conf we have on the client side.
     
    hosts/0/url=http://SEPM-Server-VM.com:7070/clu-prod
    workdir=/tmp
    logfile=/opt/Symantec/LiveUpdate/liveupdt.log
    jar=/opt/Symantec/LiveUpdate/jlu.jar
    urls=1
    maximumLogFileSize=512
    AllowConfigurationOverride=true
     
    And as it shows in SEPM-Server-VM, the required Linux file wasn’t in the download list. 
     
    http://SEPM-Server-VM.com:7070/clu-prod

     



  • 2.  RE: SEP for Linux Reporting tool package ?

    Broadcom Employee
    Posted Oct 26, 2011 04:44 AM

    Can you double check if have you configured the Internal Liveupdate administrator to download linux defintion?



  • 3.  RE: SEP for Linux Reporting tool package ?

    Posted Oct 26, 2011 07:03 PM

    Thanks for the reply Pete,

    is this on the Live Update server ?



  • 4.  RE: SEP for Linux Reporting tool package ?

    Broadcom Employee
    Posted Oct 26, 2011 11:59 PM

    yes, the Liveupdate server to download the content for Linux flavor.



  • 5.  RE: SEP for Linux Reporting tool package ?

    Posted Oct 27, 2011 09:32 PM

    Pete,

    From the live update web yes it is now progressing slowly after I initiate the manual download. So if somehow the download failed at scheduled time, would that download gets retried ?

    Or do I have to let me Remote desktop session opened with the browser still logged in to make sure the dwonload is working fine ?



  • 6.  RE: SEP for Linux Reporting tool package ?

    Broadcom Employee
    Posted Oct 28, 2011 02:37 AM

    yes if the download fails, it will trigger next at the scheduled time. You need not to have the browser open, the liveupdate process will be executing in the background.



  • 7.  RE: SEP for Linux Reporting tool package ?

    Posted Jan 25, 2012 03:40 AM

    Hi Dushan,

    If time allows, can you update this thread with any advice or recommendations about how you resolved the issue?

    Adding some notes here for the benefit of any future admins who find this thread....

    > hosts/0/url=http://SEPM-Server-VM.com:7070/clu-prod

    The SAV for Linux machine's LiveUpdate should not be directed toward the SEPM server.  The SEPM can provide updates for Windows clients, but not Macintosh or Linux computers. 

    Judging from the ":7070/clu-prod" you have a LiveUpdate Administrator 2.x server in your network.  This can provide updates for both Mac and SAV for Linux.  However, the LUA 2.x and SEPM should never be on the same server.  Here is some recommended reading:

    LiveUpdate Administrator 2.x and Symantec Endpoint Protection Manager on the Same Physical Server
    Article: TECH105076 | Created: 2008-01-05 | Updated: 2011-07-11 |
    Article URL http://www.symantec.com/docs/TECH105076

    Configuring LiveUpdate Administrator 2.x to Download and Distribute Symantec Antivirus for Linux Contents
    Article: TECH152311   |  Created: 2011-01-31   |  Updated: 2011-01-31   | 
    Article URL http://www.symantec.com/docs/TECH152311

    Configuring Symantec Antivirus for Linux (SAVFL) to download definitions from the Distribution Center of an internal LiveUpdate Administrator (LUA) 2.x Server
    Article: TECH93505   |  Created: 2009-01-17   |  Updated: 2011-01-31   | 
    Article URL http://www.symantec.com/docs/TECH93505 
      
          
    Hope this helps!  &: )



  • 8.  RE: SEP for Linux Reporting tool package ?

    Posted Jan 25, 2012 03:46 AM

    By the way--- the SAVFL Reporter (tool that forwards logs from a SAV for Linux client to the SEPM) has its install package on the latest SAVFL CD's.  It is in a directory called Reporter.  It is not installed automatically when installing SAVFL, but can be installed and configured within a few minutes if admins wish to take advantage of these new capabilities.  Let me know if more info is needed - I have it running here and can provide and instructions, etc that are necessary.

    Cheers again!

    Mick