Urgently need help

previous my update work fine suddenly today it show UNEXPECTED SERVER ERROR while updating. It's also show LiveUpdate failed. Can anyone help me.

are you logged into SEPM console?

can you post the scm-server log?

tq for the reply . can you guide where to get the SCM-SERVER log

What the failure message?

you can get the log under SEPM installed machineDrive letter:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs

there are so many log file. which one you refer at?

You are getting unexpected error while running liveupdate right?

Then do a repair from add/remove programs and REgister liveudpate as per this document

http://www.symantec.com/business/support/index?page=content&id=TECH171060

Check it for live update issue

LiveUpdate and content troubleshooting for the Symantec Endpoint Protection Manager

"Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager

You can call to symantec support and raised your sepm live update concern support ticket.

Same thread resolved after Call Symantec support

https://www-secure.symantec.com/connect/forums/sepm-1213-unexpected-server-error-broken-live-update

https://www-secure.symantec.com/connect/forums/sepm-1214-liveupdate-unexpected-server-error

This is the file as you reqguest.

Attachment(s)

scm-server log.rar   3 KB 1 version

Did you try restarting the SEPM services? 

Regards,

Prashant Katti

As per the attach logs i have find one link

2014-04-29 12:31:59.484 THREAD 248 WARNING: LiveUpdateTask>>
2014-04-29 12:37:18.734 THREAD 263 WARNING: LiveUpdateTask>>
2014-04-29 13:02:13.484 THREAD 246 SEVERE:
com.sygate.scm.server.agentmanager.InvalidDomainIdRegistrationException: Client LHDC0043 is trying to register with invalid Domain ID 7E5DC1220A7E650800ADA9D25B945298.

Symantec Endpoint Protection client is trying to register with an invalid Domain ID

David are you using Embedded or SQL DB? check this document

"Unexpected exception" messages appear in the Symantec Endpoint Protection Manager "Admin/Servers/Server section". Liveupdate has stopped automatically receiving definition content.

http://www.symantec.com/business/support/index?page=content&id=TECH122978

Rafeeq

I am newbie... can kindly guide me. Following is the screeshot when updated is completed

Attachment(s)

screenshot_2.pdf   191 KB 1 version

Prashant katti

i have restarted it many times.... please help me out

You see the message "LiveUpdate encountered one or more errors. Return code = 4

Symantec Endpoint Protection 12.1

1. Open a command window, then browse to:
   C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
2. Type lucatalog -cleanup and press Enter.
3. Type lucatalog -forcedupdate and press Enter.
4. Run LiveUpdate to verify that there are no errors.

If the error persists, examine Log.LiveUpdate for more detailed information or error codes

http://www.symantec.com/business/support/index?page=content&id=TECH103112

James007

i have try that too..

Its showing Error code 4, do you use proxy in your network? if yes then you need to set those settings inside the symantec endpoint protection manager

open 

sepm

click on admin

servers

right click server name below ( local site) Edit properties, key in your proxy server address and then follow this document

http://www.symantec.com/business/support/index?page=content&id=TECH103112

Are you using proxy ?

Please check firewall site below firewall port open or not ?

How to determine whether your firewall is blocking LiveUpdate

Rafeeg

yes... i pointed ot proxy but other PC using that proxy IP works fine

you first do the lucatalog -cleanup so that it can clear the cached results

then put the proxy settings, do lucatalog - update so that i can update settings.

click on start - run

type luall.exe

does it download definition?

Following is the CCproxy

Attachment(s)

screenshot_ccproxy.pdf   232 KB 1 version

please post the log.liveupdate which can be found here

Located: \Documents and Settings\All Users\Application Data\Symantec\LiveUpdate
 

http://www.symantec.com/business/support/index?page=content&id=TECH105924

did you run luall.exe ? what was the result , error code 4?

Rafeeq,... i see any folder as u mention

opps! its 12.1, my apologies,

can you check it under

C:\ProgramData\Symantec\LiveUpdate

it will be log.liveupate, you can open this file in notepad, does it say anything about proxy?or authentication issue, please attach that file..

Did you run luall.exe ? what was the result?

the reason I'm asking is, when you run luall.exe from start - run, liveudpate will run on your account, so anything with respect to proxy or firewall will be displayed here, 

something like this one 

How to verify SYSTEM account proxy settings 

http://www.symantec.com/business/support/index?page=content&id=TECH146632

Hi,

Please do the following:

1) Quick check using the following command check "8443" is in use.

2 )netstat -an |findstr 8443

Output should be following:-

Do let us know if you were able to solve with the above solution.

Thanks for the big help. The problem is been solved. I logged to symantec and report a case.