Endpoint Protection

 View Only
Expand all | Collapse all

SepM12 Live update fail

Migration User

Migration UserAug 27, 2012 11:02 AM

Migration User

Migration UserAug 27, 2012 11:18 AM

Migration User

Migration UserAug 27, 2012 11:19 AM

pete

peteAug 27, 2012 11:45 AM

  • 1.  SepM12 Live update fail

    Posted Aug 27, 2012 10:50 AM

    Hi Guys,

               I am getting an error every time live update runs on my sepm. It says Live Update failed every time it tries to update. One thing i did notice under show live update status it shows last live update time: Monday Aug 27th Next Live Update time: Friday Aug 24th.

     

           Things that i have done:

                     Cleaned out definitions.

                     Restarted Service.

     

     

     



  • 2.  RE: SepM12 Live update fail

    Posted Aug 27, 2012 11:00 AM

    pass on the liveupdate log ..

    Edit..

    Hello,

    I believe you are running the SEP 12.1 on your machine.

    Could let us know what OS are you running on this server?

    Could you please provide us the full SEPM 12.1 version and SEP 12.1 client version?

    Is the SEP client installed on the server an Unmanaged Client?

    Are you using any proxy ?

    Check this Article:

    Symantec Endpoint Protection: LiveUpdate Troubleshooting Flowchart

    http://www.symantec.com/docs/TECH95790

    Please answer the above question and please upload the log.liveupdate and Log.Lue from the server machine which would provide us the root cause of the issue.

     

    More detailed information about why LiveUpdate failed can be found in the following log file:

    These are found under:

    C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Log.LiveUpdate

    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Lue\Logs

    On Windows Vista, Windows 7, and Windows Server 2008:
    C:\Program Data\Symantec\Symantec Endpoint Protection\<silo_id>\Data\Lue\Logs

     



  • 3.  RE: SepM12 Live update fail

    Posted Aug 27, 2012 11:02 AM

    can you give the location for that file

     



  • 4.  RE: SepM12 Live update fail

    Broadcom Employee
    Posted Aug 27, 2012 11:02 AM

    whats the error?

    if the error

    "Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager

    http://www.symantec.com/business/support/index?page=content&id=TECH103112
     

     



  • 5.  RE: SepM12 Live update fail

    Broadcom Employee
    Posted Aug 27, 2012 11:04 AM

    C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Log.LiveUpdate

    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Lue\Logs

    On Windows Vista, Windows 7, and Windows Server 2008:
    C:\Program Data\Symantec\Symantec Endpoint Protection\<silo_id>\Data\Lue\Logs



  • 6.  RE: SepM12 Live update fail

    Posted Aug 27, 2012 11:06 AM

    More detailed information about why LiveUpdate failed can be found in the following log file:

    These are found under:

    C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Log.LiveUpdate

    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Lue\Logs

    On Windows Vista, Windows 7, and Windows Server 2008:
    C:\Program Data\Symantec\Symantec Endpoint Protection\<silo_id>\Data\Lue\Logs

    And do you have received any error code ?



  • 7.  RE: SepM12 Live update fail

    Posted Aug 27, 2012 11:10 AM

    I do have sepm installed on the d drive with the os installed on the c



  • 8.  RE: SepM12 Live update fail

    Posted Aug 27, 2012 11:14 AM

    hi,

    this is default location you can't change this location.

    You can found

    These are found under:

    C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Log.LiveUpdate

    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Lue\Logs

    On Windows Vista, Windows 7, and Windows Server 2008:
    C:\Program Data\Symantec\Symantec Endpoint Protection\<silo_id>\Data\Lue\Logs



  • 9.  RE: SepM12 Live update fail

    Posted Aug 27, 2012 11:18 AM

    okay then there are no logs in that file



  • 10.  RE: SepM12 Live update fail

    Posted Aug 27, 2012 11:19 AM

    hi,

    Ok you have you recived any error code ?



  • 11.  RE: SepM12 Live update fail

    Posted Aug 27, 2012 11:40 AM

    Not to my knowledge but i have notice if i run luall.exe it updates the management definisions.



  • 12.  RE: SepM12 Live update fail

    Broadcom Employee
    Posted Aug 27, 2012 11:45 AM

    which version of sepm?



  • 13.  RE: SepM12 Live update fail

    Posted Aug 27, 2012 11:49 AM

    Did you try disabling the Windows Firewall on the machine and checked ?

    Also, When uninstalling and reinstalling LiveUpdate, are you using the correct client for SEP 12.1?  

    http://www.symantec.com/business/support/index?page=content&id=TECH171060

    Make sure you are using Liveupdate version 3.3.1.23- nothing earlier!

    Windows LiveUpdate Client for Use with Symantec Endpoint Protection Manager 12.1
    Article: TECH181305   |  Created: 2012-02-13   |  Updated: 2012-03-21   | 
    Article URL http://www.symantec.com/docs/TECH181305

    Also, check the Proxy settings in SEPM 12.1 if they are correct?

    How to Update the Proxy settings in the Symantec Endpoint Protection Manager (SEPM) 12.1

    https://www-secure.symantec.com/connect/articles/how-configure-proxy-settings-symantec-endpoint-protection-manager-sepm-121



  • 14.  RE: SepM12 Live update fail

    Posted Aug 27, 2012 02:08 PM

    Windows firewall is off and there are no proxies used.  If possible would it be easier for me to reinstall the SepM on the server since everything is stored in a db server i wont have any problems with settings.



  • 15.  RE: SepM12 Live update fail
    Best Answer

    Broadcom Employee
    Posted Aug 27, 2012 02:26 PM

    if you confirm the luall.exe updates the machine, then there is no need to reinstall sepm. reinstall of lu should be ok.