Hello, I had upgraded my SEPM from RU2 to RU3 (12.1.3001.165 Small Business). A few days after the update (no configuration changes), SEPM stopped downloading virus definitions. I tried to repair (reinstall) and cleaning SEPM LiveUpdate (lucatalog.exe "-cleanup), but to no avail. SEPM shows the latest updates from Symantec 21.07.2013 and the SEPM server 12.07.2013. LiveUpdate status is successful (code LUALL.EXE = 0) and "no updates found".

Do you have any ideas?

do you change proxy?

has there been change in the proxy?

How to update definitions for Symantec Endpoint Protection Manager using a JDB file

http://symantec.com/docs/TECH102607

Hello,

Check this artical some time virus defination not updating due to corrupt old virus defination.

Symantec Endpoint Protection Manager 12.1 is not updating 32-bit or 64-bit virus definitions due to corrupt content

How to update virus definitions and other content with Symantec Endpoint Protection and Symantec Network Access Control

I have a proxy but there was no change.

Navigate to control pannel

open liveupdate

fill in the proxy details

start - run 

luall.exe

check if that updates the defs

does updating jdb file makes SEPM updated?

post the logliveupdate

does updating jdb file makes SEPM updated?

NO.

log.liveupdate is in attachments (before and after proxy remove)

Attachment(s)

Log.LiveUpdate_24.txt   206 KB 1 version

does the jdb file vanishes from the folder?

from the log it looks like the update has been successful for AV

LiveUpdate has called the last callback for product SESM AntiVirus Client Win64, so LiveUpdate is informing the callback proxy that it can exit.
2013-07-22, 10:00:58 GMT -> Progress Update: PATCH_PROCESSING_FINISH: Number of patches: 4, Num successful: 2

2013-07-22, 10:00:58 GMT -> EVENT - PRODUCT UPDATE SUCCEEDED EVENT - Update available for SEPM Virus Definitions Win32 12.1 RU2 H - MicroDefsB.CurDefs - SymAllLanguages. Update for CurDefs takes product from update 0 to 130721020. Server name - liveupdate.symantecliveupdate.com, Update file - 1374471972jtun_sep12enncur26.m26, Signer - cn=Symantec Corporation,ou=Locality - Culver City,ou=Product Group - LiveUpdate,ou=SymSignature 2005,o=Symantec Corporation, package install code 0. The Update executed with a result code of 1800, => Sukces

2013-07-22, 10:00:58 GMT -> EVENT - PRODUCT UPDATE SUCCEEDED EVENT - Update available for SEPM Virus Definitions Win64 (x64) 12.1 RU2 H - MicroDefsB.CurDefs - SymAllLanguages. Update for CurDefs takes product from update 0 to 130721020. Server name - liveupdate.symantecliveupdate.com, Update file - 1374471972jtun_emt64sep12enccur26.m26, Signer - cn=Symantec Corporation,ou=Locality - Culver City,ou=Product Group - LiveUpdate,ou=SymSignature 2005,o=Symantec Corporation, package install code 0. The Update executed with a result code of 1800, => Sukces

if the issue still exist, reinstall LU.
 

I've already reinstalled LiveUpdate service.

I've found an error in log.liveupdate in polish language:

2013-07-22, 10:00:58 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Silent Mode. LiveUpdate found 4 updates available, of which 2 were installed and 2 failed to install.  The LiveUpdate session exited with a return code of 1817, Usługa LiveUpdate zainstalowała tylko niektóre z dostępnych aktualizacji, instalacja pozostałych aktualizacji nie powiodła się z powodu błędów.

Translation: LiveUpdate is installed only some of the available updates, the installation of other updates failed due errors.

hasnt the SEPM homepage shows the latest update?

1817 says some of the updates are updated , here 2 updates out of 4.

SEPM Homepage shows:

Latest from Symantec: 21.07.2013 r20

Latest on the server: 12.07.2013 r16

did you try this?

Navigate to control pannel

open liveupdate, make the session as Interactive

fill in the proxy details

start - run 

luall.exe

select only few updates and check if they install

check if that updates the defs

Thanks, its great tools.

I've received two errors:

SEPM Virus definitions Win32 12.1 RU2 H - An internal error

SEPM Virus definitions Win64 12.1 RU2 H - An internal error

I suggest two documents clear corrupt defs and

 increase the time 

clear corrupt defs document

clear the corrupt defs as per this article

http://www.symantec.com/business/support/index?page=content&id=TECH166923

http://www.symantec.com/business/support/index?page=content&id=TECH188847

settings.liveupdate will be in same place where you found the liveupdate log

Everything without result.

I have an internal error LU1803 - internal error during install SEPM Virus Definitions Win32 12.1 RU2 H (1 from 2) by LUALL utility.

check this and share us the result

How to determine whether your firewall is blocking LiveUpdate

http://www.symantec.com/business/support/index?page=content&id=TECH139451

I recovered the old version of SEPM from the backup and it's ok, now.

Thank you all for your help.