What is the SEPM version?

Can you try reinstalling LiveUpdate on SEPM

How to Uninstall and Reinstall LiveUpdate on SEPM 12.1 (Enterprise Edition or Small Business Edition)

Any specific error Code while running Liveupdate?

Usually You see the message "LiveUpdate encountered one or more errors. Return code = 4".

This error can be caused for different reasons including, but not limited to, the following:

1. Internet access is being blocked by a proxy server. (Please see the Technical Information section of this document for steps to configure Liveupdate for use with a proxy)
2. Symantec Endpoint Protection Manager is trying to connect to an internal LiveUpdate server and the URL supplied to LiveUpdate is not correct.
3. Enhanced Security is enabled in Internet Explorer (Please see the Technical Information section of this document for steps to disable IE Enhanced Security)
4. A firewall that requires authentication to get to the internet is used.
5. The Symantec Endpoint Protection Manager is no longer registered with LiveUpdate.
6. A Web filtering device detects and blocks certain items.

Note: To re-register the SEPM with LiveUpdate, follow the steps below:

Symantec Endpoint Protection 11.x

1. Open a command window, then browse to:
   C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
2. Type lucatalog -update and press Enter.
3. Run LiveUpdate to verify that there are no errors.

Symantec Endpoint Protection 12.1

1. Open a command window, then browse to:
   C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
2. Type lucatalog -cleanup and press Enter.
3. Type lucatalog -forcedupdate and press Enter.
4. Run LiveUpdate to verify that there are no errors.

There is no error, infact it says liveupdate successful with return code=0 . Please check the attached screen shot.

Check the following folders:

C:\program files\Symantec\symantec endpoint manager\inetpub\content\[definitions subfolder]\[definition revision]

...for the definitions subfolder see on either:

{535CB6A4-441F-4e8a-A897-804CD859100E}: SEPC Virus Definitions Win32 v12.1

or
{07B590B3-9282-482f-BBAA-6D515D385869}: SEPC Virus Definitions Win64 (x64) v12.1

...what is the latest folder you see here?

Then check  as well :

C:\ProgramData\Symantec\Definitions\SymcData\spcVirDefs32 and spcVirDefs32 - what is the latest defs subfolder here?

Hi,

Check this thread

https://www-secure.symantec.com/connect/forums/live-update-not-working-sepm

Symantec Endpoint Protection Manager (SEPM) 12.1 is not updating 32 or 64 bit virus definitions.

Hello,

Readers of this Thread may also be interested in:

Symantec Endpoint Protection Manager 11.x is not updating 32 or 64 bit virus definitions.
Article: TECH104721   |  Created: 2008-01-15   |  Updated: 2012-06-16   | 
Article URL http://www.symantec.com/docs/TECH104721

Symantec Endpoint Protection Manager (SEPM) 12.1 is not updating 32 or 64 bit virus definitions.
Article: TECH166923   |  Created: 2011-08-11   |  Updated: 2012-02-06   | 
Article URL http://www.symantec.com/docs/TECH166923

Hope that helps!!

I had this happen on two SEPM's, both times I ended up tunning down the number of content revisions to keep to 3.  After a few hours the SEPM's would register the latest definitions then changing the revisions back to a more reliable number. 

Neither SEPM was stating it was low on space, it just would not download the definition and not give any specific error.

Hi

Please reinstalled the Liveupdate and run manual liveupdate

Regards