Endpoint Protection

Hi All!

Can you help me?

I have a problem about Symantec Endpoint server. Now, Symantec Endpoint server is not update and show following error

January 1, 2016 12:33:03 AM ICT:  LiveUpdate failed.  [Site: ********]  [Server: ********]
January 1, 2016 12:33:03 AM ICT:  LUALL.EXE finished running.  [Site: ********]  [Server: ********]
January 1, 2016 12:33:03 AM ICT:  LiveUpdate will start next on Friday, January 1, 2016 4:33:03 AM ICT on ********.  [Site: ********]  [Server: ********]
January 1, 2016 12:33:02 AM ICT:  LiveUpdate encountered one or more errors. Return code = 4.  [Site: ********]  [Server: ********]
January 1, 2016 12:33:02 AM ICT:  LUALL.EXE has been launched.  [Site:********]  [Server: ********]
January 1, 2016 12:32:52 AM ICT:  LiveUpdate started.  [Site: *******]  [Server: ********]

Can you help me fix it?

Hi Tan,

Please check your system time showing January 1, 2016 12:33:03 AM.

are you using proxy ?

Error: "LiveUpdate encountered one or more errors. Return code = 4" in Endpoint Protection Manager

LiveUpdate fails on the Symantec Endpoint Protection Manager with errors in Log.LiveUpdate similar to "LiveUpdate couldn't expand replacement path [spcIronWl-incr-InstallDir]."

Hi Jame007!

I checked my time system 1/8/2015, I dont understand liveupdate show January 1, 2016 12:33:03 AM. can you help me fix it

And my system don't use proxy, I config firewall authen IP to internet

Thanks!

You can contact tech support for resolution

Create a case with with Symantec Technical Support Team.

How to create a new case in MySupport http://www.symantec.com/docs/TECH58873

Phone numbers to contact Tech Support:-

Regional Support Telephone Numbers:

• United States: https://support.broadcom.com (407-357-7600 from outside the United States)
• Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
• United Kingdom: +44 (0) 870 606 6000

This is expected behavior based on the design.  When events are completed they are logged with the time stamp when they happened and are inserted into the database.  Subsequent scheduled or timed events such as LiveUpdate use those entries to base the future scheduling on.  Events inserted with a future date can skew or prevent them from running as expected.  To resolve this issue, there is a tool included in the SEPM tools directory.  Please follow the instructions below.

1. Locate the SEPM tools directory (...\Symantec Endpoint Protection Manager\Tools\)
2. Stop the SEPM service
3. Run the tool updatedbtime.bat
4. Start the SEPM service

SEPM LiveUpdate is not functioning after the server's clock was accidentally moved into the future