Endpoint Protection

Specs SEPM: Windows 2008R R2 / SEPM 11.0.7101.1056

The SEPM works ok, all clients are connected to the SEPM and are up-to-date. The problem is that de SEPM does not automatically update the content. When I try to manually download the LiveUpdate Content, I get the following error:

13 februari 2012 16:29:27 CET:  LiveUpdate failed.  [Site: Site VAS04]  [Server: VAS04]
13 februari 2012 16:29:27 CET:  LUALL.EXE finished running.  [Site: Site VAS04]  [Server: VAS04]
13 februari 2012 16:29:27 CET:  LiveUpdate encountered one or more errors. Return code = 4.  [Site: Site VAS04]  [Server: VAS04]
13 februari 2012 16:29:25 CET:  LUALL.EXE has been launched.  [Site: Site VAS04]  [Server: VAS04]
13 februari 2012 16:29:25 CET:  Download started.  [Site: Site VAS04]  [Server: VAS04]

I searched for that error, many possible solutions, but none worked. The only manual solution I found is to select the Local Site and select Edit Site Properties, click on OK. After that, the Download LiveUpdate Content works.

Anyone an idea?

can you try steps from this article

http://www.symantec.com/business/support/index?page=content&id=TECH103112

Hi,

Please check following articles

How to determine whether your firewall is blocking LiveUpdate

http://service1.symantec.com/support/sharedtech.nsf/docid/2003090514252213

Liveupdate setup.

ftp://ftp.symantec.com/public/english_us_canada/liveupdate/3.3.0/

As you mentioned "The only manual solution I found is to select the Local Site and select Edit Site Properties, click on OK."--> What changes you do under Site properties ?

Please check and do the following:

1. Internet access is being blocked by a proxy server.<Please see the Technical Information section of this document for steps to configure Liveupdate for use with a proxy>

2. Symantec Endpoint Protection Manager is trying to contact via an internal LiveUpdate server and the URL supplied to LiveUpdate is not correct.

3. Enhanced Security is enabled in Internet Explorer <Please see the Technical Information section of this document for steps to disable IE Enhanced Security>

4. A firewall that requires authentication to get to the internet is used.

5. Re-register the SEPM with LiveUpdate.

6. Web filtering device detects and blocks certain items.

Note: To re-register the SEPM with LiveUpdate, follow the steps below:

1. Open a command window, then browse to:
   C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
   

2. Type lucatalog -update and press Enter.

3. Run LiveUpdate to verify that there are no errors.

 For Symantec Endpoint Protection 12.1, follow the steps below:

1. Open a command window, then browse to:
   C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
   

2. Type lucatalog -cleanup and press Enter.

3. Type lucatalog -forcedupdate and press Enter.

4. Run LiveUpdate to verify that there are no errors.

If the error persists, examine Log.LiveUpdate for more detailed information or error codes.

Regards

Mark as a solution if it works