Endpoint Protection

 View Only
Expand all | Collapse all

SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

  • 1.  SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Posted Aug 20, 2012 04:13 AM

    Hi people,

    What should I do to fix this Live Update error return Code = 4 issue ?

    my internal SEPM server is fine using the same Proxy account to download the update from the internet however, my DMZ SEPM returning an error in retrieving the update from the Internal SEPM server ?



  • 2.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?



  • 3.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Broadcom Employee
    Posted Aug 20, 2012 04:17 AM

    "Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager

    http://www.symantec.com/business/support/index?page=content&id=TECH103112



  • 4.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Trusted Advisor
    Posted Aug 20, 2012 04:33 AM

    Hello,

    LiveUpdate encountered one or more errors Return code = 4 is a Generic Error.

    Could you please upload the log.liveupdate?

    That would help us understand the root cause of the issue.

    Again, are you using any proxy?

    Did you try disabling the Windows Firewall on the machine and checked ?

    Also, When uninstalling and reinstalling LiveUpdate, are you using the correct client for SEP 12.1?  

    http://www.symantec.com/business/support/index?page=content&id=TECH171060

    Make sure you are using Liveupdate version 3.3.1.23- nothing earlier!

    Windows LiveUpdate Client for Use with Symantec Endpoint Protection Manager 12.1
    Article: TECH181305   |  Created: 2012-02-13   |  Updated: 2012-03-21   | 
    Article URL http://www.symantec.com/docs/TECH181305

    Also, check the Proxy settings in SEPM 12.1 if they are correct?

    How to Update the Proxy settings in the Symantec Endpoint Protection Manager (SEPM) 12.1

    https://www-secure.symantec.com/connect/articles/how-configure-proxy-settings-symantec-endpoint-protection-manager-sepm-121

    Hope that helps!!



  • 5.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Posted Aug 20, 2012 04:38 AM

    ok, I have checked that Live update from the Internal SEPM went successfully, but not in the DMZ SEPM

    <Drive>:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Log.LiveUpdate

    the error log shows that It cannot open  http://SEPMInternal-VM:7070/clu-prod/ URL ?

    does that means if I want to retrieve the SEPM update from another SEPM server between sites internally, I will have to install Internal LUA server running at on that port ?



  • 6.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Trusted Advisor
    Posted Aug 20, 2012 04:46 AM

    Hello,

    Which version of LUA are you running?

    Check this Article:

    Updating downloads in an internal LiveUpdate Administrator 2.x Server using the downloads from an external LiveUpdate Server

    http://www.symantec.com/docs/TECH106254

    Check these Threads:

    https://www-secure.symantec.com/connect/forums/lua-stopped-working-after-service-restart

    https://www-secure.symantec.com/connect/forums/liveupdate-issue-dmz

    Hope that helps!!



  • 7.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Posted Aug 20, 2012 04:50 AM

    Thanks for the reply people,

    So does this means that I will need to install the LUA v 2.3.1 in order for my DMZ SEPM to get the update regularly ?



  • 8.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Broadcom Employee
    Posted Aug 20, 2012 04:53 AM

    welll the SEPM should be able to browse this URL

    http://SEPMInternal-VM:7070/clu-prod/

    then it should have definition list available, if available then download.

    Yes 2.3.1 is the latest version, it is strongly recommended to use this version. However if you are still unable to access this URL even after upgrade you will still have this issue.



  • 9.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Trusted Advisor
    Posted Aug 20, 2012 04:54 AM

    Hello,

    As you suggested , "The error log shows that It cannot open  http://SEPMInternal-VM:7070/clu-prod/ URL" which pertains to LUA distribution center.

    LUA 2.3.1 is the latest version of LUA and is always recommended.

    Check these Threads:

    https://www-secure.symantec.com/connect/forums/lua-stopped-working-after-service-restart

    https://www-secure.symantec.com/connect/forums/liveupdate-issue-dmz

    Hope that helps!!



  • 10.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Posted Aug 20, 2012 04:57 AM

    Pete,

    I have run netstat -ano on the SEPMInternal-VM and could not find anything listening on port 7070, but on 8014 and 8443 there are some.



  • 11.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Trusted Advisor
    Posted Aug 20, 2012 04:58 AM

    Hello,

    Do you have a LUA installed?

    Could you please upload the log.liveupdate?



  • 12.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Broadcom Employee
    Posted Aug 20, 2012 05:02 AM

    that shows the connection, since nothing shows up on 7070, check the firewall is blocking. as asked is Internal LUA installed?



  • 13.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Posted Aug 20, 2012 05:09 AM

    Hm.. I'm afraid no, because it was suggested that I shouldn't install it on my Internal SEPM.



  • 14.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Trusted Advisor
    Posted Aug 20, 2012 05:19 AM

    Hello,

    Well, since LUA is not installed, we may have to check the Log.liveupdate as there may be something else which may be causing the error to occur.

    Secondly, since it's a DMZ, check these Articles:

    Best Practices: Configuring a Symantec Endpoint Protection environment in a DMZ

    http://www.symantec.com/docs/TECH178325

    How to update content on a Symantec Endpoint Protection Manager that doesn't have Internet access

    http://www.symantec.com/docs/TECH104893

    Updating downloads in an internal LiveUpdate Administrator 2.x Server using the downloads from an external LiveUpdate Server

    http://www.symantec.com/docs/TECH106254

    How to distribute definition content from a LiveUpdate Administrator 2.x (LUA 2.x) server to an isolated network.

    http://www.symantec.com/docs/HOWTO44060

    Hope that helps!!



  • 15.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Broadcom Employee
    Posted Aug 20, 2012 05:27 AM

    if LUA is not installed, then you should change the LU policy accordingly.



  • 16.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Posted Aug 20, 2012 05:38 AM

    Pete,

    Where to set the Policy so that my DMZ SEPM can get the update from Internal SEPM server ?



  • 17.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Trusted Advisor
    Posted Aug 20, 2012 05:51 AM

    Hello,

    Check this Thread: https://www-secure.symantec.com/connect/forums/sepm-dmz-0

    Hope that helps!!



  • 18.  RE: SEPM v 12.1 RU1 LiveUpdate return error code = 4 in Live Updating ?

    Broadcom Employee
    Posted Aug 20, 2012 05:52 AM

    SEPM can get the updates either from LUA or Symantec Liveupdate.

    Else you need to manually update using jdb file.