Endpoint Protection Small Business Edition

 View Only
  • 1.  SEPM 12.1 RU5 & LiveUpdate: Manuelle Integration von Updates in LU

    Posted Oct 10, 2014 09:47 AM

    Ich habe auf einem (noch) windows 2003-Server ein Update auf SEP 12.1 RU5 gemacht.

    Seit dem Update bekomme ich die Viredefinitionen x32 und x64 nicht mehr via LiveUpdate heruntergeladen - die Ursache ist mit hoher Whrahscinelichkeit die, dass diese Dateien jeweils 400 MB groß sind (siehe hier) und der SEPM über einen Proxy ins Internet geht, der seinerseits durch mehrere Firewalls geschützt ist. Dadurch ist der Download zu langsam und bricht dann ab. Organisatorisch kann ich weder die Einstellung der Firewalls ändern, noch kurzfristig die Anbindung des Server ändern, da diese Dinge Vorgegeben sind.

    Deswegen ist meine Idee nun die, dass ich gerne die beiden großen Update-Dateien auf anderem Wege herunterlade um sie dann auf den Server zu kopieren. Aber wie muss ich die Datei in das dortige LiveUpdate integrieren, so dass dieses auch mitbekommt, dass die Dateien bereits vorliegend sind? Es geht also quasi darum, dass ich erreichen möchte, dass meine manuell heruntergeladenen Dateien im LiveUpdate auf die gleiche Weise vorliegen und behandelt werden, als wenn sie vom LU selbst aus dem Internet heruntergeladen wurden.

    Bisher habe ich leider noch nichts passendes ergoogeln können :(

     

    Besten Dank schon mal für Tipps dazu!

     

    Gruß

    JD



  • 2.  RE: SEPM 12.1 RU5 & LiveUpdate: Manuelle Integration von Updates in LU
    Best Answer



  • 3.  RE: SEPM 12.1 RU5 & LiveUpdate: Manuelle Integration von Updates in LU

    Posted Oct 10, 2014 09:52 AM

    start -- run

    luall.exe

    download only small quantities at a time.

     



  • 4.  RE: SEPM 12.1 RU5 & LiveUpdate: Manuelle Integration von Updates in LU

    Posted Oct 10, 2014 10:00 AM

    luall runs into the error all the time, I tried it several times now - the problem is the file-Size and the proxy. So there is no way for to reduce the file size as it is as is offered by Symantec.



  • 5.  RE: SEPM 12.1 RU5 & LiveUpdate: Manuelle Integration von Updates in LU

    Posted Oct 10, 2014 10:02 AM

    There isn't a way coming from Symantec...



  • 6.  RE: SEPM 12.1 RU5 & LiveUpdate: Manuelle Integration von Updates in LU

    Posted Oct 10, 2014 10:02 AM

    Hi, this seems to be a good hint. I just read the article you linked and will try it.



  • 7.  RE: SEPM 12.1 RU5 & LiveUpdate: Manuelle Integration von Updates in LU

    Posted Oct 10, 2014 10:46 AM

    OK, I followed the description above and copied the vd429210.jdb-File () to the directory. Then I checked the directories as given in the linked article and it looks good so far.

     

    But now I have a heavy CPU-load since 25 minutes at the server caused by dbsrv16.exe and SEMSvc.exe. Is this a normal behaviour? (The server is a 2003x32, two CPU-cores and 2.5 GB RAM virtualized with vSphere) After the the 25 minutes it seems to be normal again, so I could go on:

     

    Now I restarted LUALL, but it fails again:

    Downloading SEPM Virus Definitions Win32 12.1 RU5 (1 of 2), complete.
    Downloading SEPM Virus Definitions Win64 (x64) 12.1 RU5 (1 of 2), complete.
    Downloading SESM Symantec Security Content A1 (1 of 2), complete.
    Downloading SESM Symantec Security Content A1 (2 of 2), complete.
    Downloading SESM Symantec Security Content A1-64 (1 of 2), complete.
    Downloading SESM Symantec Security Content A1-64 (2 of 2), complete.
    Downloading SESM Symantec Security Content B1 (1 of 2), complete.
    Downloading SESM Symantec Security Content B1 (2 of 2), complete.
    Downloading SESM Symantec Security Content B1-64 (1 of 2), complete.
    Downloading SESM Symantec Security Content B1-64 (2 of 2), complete.
    Downloading SESM IPS Signatures Win32 (1 of 1), complete.
    Downloading SESM IPS Signatures Win64 (1 of 1), complete.
    Downloading SEPM CIDS Signatures 12.1 RU5 (1 of 1), complete.
    Downloading SEPM Iron Whitelist 12.1 RU5 (1 of 1), complete.
    Downloading SEPM Virus Definitions Win32 12.1 RU5 (2 of 2), failed.
    LU1803: LiveUpdate had an internal error while getting your updates. Your Symantec programs were not updated.

    You should try getting updates at a later time.  If LiveUpdate fails again with this error, you should re-install LiveUpdate.
    Downloading SEPM Virus Definitions Win64 (x64) 12.1 RU5 (2 of 2), 5% complete...

    (This one will fail too after some minutes :( )

     

    Is the content of vd429210.jdb the right one to cover the both files that are failing or do I need to copy other files into the directoy?

     

    Regards

    Frank



  • 8.  RE: SEPM 12.1 RU5 & LiveUpdate: Manuelle Integration von Updates in LU

    Posted Oct 10, 2014 10:48 AM

    Should be expected until it normalizes.

    Yes, should cover both.



  • 9.  RE: SEPM 12.1 RU5 & LiveUpdate: Manuelle Integration von Updates in LU

    Posted Oct 10, 2014 10:51 AM

    Hmm, then it does not work :(

    Any more ides what to do?

    I think it's strange that all the other updates can be downloaded so I think it is not a network-issue, isn't it?

    Regards

     

     

    This is the log from the LuAll-Window:

     

    The following Symantec products and components are installed on your computer.
    > LiveUpdate
    > SEPM Behavior And Security Heuristics 12.1 RU5
    > SEPM CIDS Signatures 12.1 RU5
    > SEPM Content Catalog
    > SEPM Extended File Attributes and Signatures 12.1 RU5
    > SEPM HI Policy Contents Windows
    > SEPM Iron Revocation List 12.1 RU5
    > SEPM Iron Settings 12.1 RU5
    > SEPM Iron Whitelist 12.1 RU5
    > SEPM SMR Definitions 12.1 RU5
    > SEPM SRTSP Settings
    > SEPM Submission Control Data
    > SEPM Virus Definitions Win32 12.1 RU5
    > SEPM Virus Definitions Win64 (x64) 12.1 RU5
    > SESM IPS Signatures Win32
    > SESM IPS Signatures Win64
    > SESM SEP PTS Content
    > SESM SEP PTS Engine Win32
    > SESM SEP PTS Engine Win64
    > SESM Submission Control Data
    > SESM Symantec Known Application System
    > SESM Symantec Security Content A1
    > SESM Symantec Security Content A1-64
    > SESM Symantec Security Content B1
    > SESM Symantec Security Content B1-64

    Initializing...
    Connecting to liveupdate.symantecliveupdate.com...

    Downloading catalog file (1 of 36), product up-to-date.
    Downloading catalog file (2 of 36), product up-to-date.
    Downloading catalog file (3 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (4 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (5 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (6 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (7 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (8 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (9 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (10 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (11 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (12 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (13 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (14 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (15 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (16 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (17 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (18 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (19 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (20 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (21 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (22 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (23 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (24 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (25 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (26 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (27 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (28 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (29 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (30 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (31 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (32 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (33 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (34 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (35 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list
    Downloading catalog file (36 of 36), complete.
    Opening update list
    The digital signature found on the catalog file has been signed by Symantec Corporation.
    Processing update list
    Opening update list
    Processing update list

    The following updates have been found:
    > SEPM Virus Definitions Win32 12.1 RU5,  392472.7 KB 
    > SEPM Virus Definitions Win64 (x64) 12.1 RU5,  393718.2 KB 
    > SESM Symantec Security Content A1,  12838.9 KB 
    > SESM Symantec Security Content A1-64,  12839.0 KB 
    > SESM Symantec Security Content B1,  74.6 KB 
    > SESM Symantec Security Content B1-64,  74.7 KB 
    > SESM IPS Signatures Win32,  1124.2 KB 
    > SESM IPS Signatures Win64,  1145.1 KB 
    > SEPM CIDS Signatures 12.1 RU5,  1468.5 KB 
    > SEPM Iron Whitelist 12.1 RU5,  4.1 KB 
    Total Download 815759.9 KB 

    Downloading SEPM Virus Definitions Win32 12.1 RU5 (1 of 2), complete.
    Downloading SEPM Virus Definitions Win64 (x64) 12.1 RU5 (1 of 2), complete.
    Downloading SESM Symantec Security Content A1 (1 of 2), complete.
    Downloading SESM Symantec Security Content A1 (2 of 2), complete.
    Downloading SESM Symantec Security Content A1-64 (1 of 2), complete.
    Downloading SESM Symantec Security Content A1-64 (2 of 2), complete.
    Downloading SESM Symantec Security Content B1 (1 of 2), complete.
    Downloading SESM Symantec Security Content B1 (2 of 2), complete.
    Downloading SESM Symantec Security Content B1-64 (1 of 2), complete.
    Downloading SESM Symantec Security Content B1-64 (2 of 2), complete.
    Downloading SESM IPS Signatures Win32 (1 of 1), complete.
    Downloading SESM IPS Signatures Win64 (1 of 1), complete.
    Downloading SEPM CIDS Signatures 12.1 RU5 (1 of 1), complete.
    Downloading SEPM Iron Whitelist 12.1 RU5 (1 of 1), complete.
    Downloading SEPM Virus Definitions Win32 12.1 RU5 (2 of 2), failed.
    LU1803: LiveUpdate had an internal error while getting your updates. Your Symantec programs were not updated.

    You should try getting updates at a later time.  If LiveUpdate fails again with this error, you should re-install LiveUpdate.
    Downloading SEPM Virus Definitions Win64 (x64) 12.1 RU5 (2 of 2), failed.
    LU1835: The LiveUpdate server failed to respond in a reasonable amount of time.  This could happen because you could not connect to the server, the server is now unavailable, or you became disconnected to the server.  Try running LiveUpdate again.
    Downloading failed, error summary...
    LU1835: The LiveUpdate server failed to respond in a reasonable amount of time.  This could happen because you could not connect to the server, the server is now unavailable, or you became disconnected to the server.  Try running LiveUpdate again.

    LiveUpdate session is complete.



  • 10.  RE: SEPM 12.1 RU5 & LiveUpdate: Manuelle Integration von Updates in LU

    Posted Oct 13, 2014 02:56 AM

    Hi!

     

    Strange - it seems that the LiveUpdate-Utility did not recognized on Friday that the Update has been already retrieved manually so it tries to download them again. As I decided to let it work as usual during the weekend it now works and has downloaded the definitions from saturday and sunday. They are also published to the clients - so everything seems to work fine.

     

    Is there a way to check (and repair if needed) the LU-database for any problems and/or inconsistences?

     

    BTW: This SEP-installation is really old and based on a SEP11 installation. I recognized that the LU tries to download some things for this version without succes. How can I setup the LU not trying to download this old stuff as I do not need it (the clients are all on 12.1.3 and will be updated to 12.1.5 soon). Is thhis done with the LuCatalog.exe fom %SEPMDIRECTORY%\bin ?

     

     

    Thank you all for your assistance!

    yes