Video Screencast Help

URL's for default Symantec Liveupdate server

Created: 10 Oct 2013 • Updated: 10 Oct 2013 | 6 comments
ThaveshinP's picture
This issue has been solved. See solution.

What are the URL's required to be added to a proxy firewall server to allow a SEP client to get updates from the default Symantec liveupdate server?

Are there any ports as well to be allowed?

Comments 6 CommentsJump to latest comment

Mithun Sanghavi's picture


For Symantec Liveupdate, allow these urls -

Also, Check these Articles for making proper exceptions : 

How to Update the Proxy settings in the Symantec Endpoint Protection Manager (SEPM) 12.1

Required exclusions for proxy servers to allow Symantec Endpoint Protection to connect to Symantec reputation and licensing servers

Hope that helps!!

Mithun Sanghavi
Associate Security Architect


Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Chetan Savade's picture


Thank you for posting in Symantec community.

Make sure that the firewall allows the LiveUpdate executable to connect to the Internet through the correct ports and that the firewall allows connections to the correct domains. Read your firewall's documentation or contact the manufacturer to find out how to confirm these settings.

  • LiveUpdate connects over TCP ports 80 (HTTP), 21 (FTP) and 443 (HTTPS).
  • The file that connects to the Internet is LuComServer_*_*.exe in LiveUpdate 2.5 and later and Lucomserver.exe in LiveUpdate 2.0 and earlier.
  • The default folder for this file is C:\Program Files\Symantec\LiveUpdate.
  • LiveUpdate connects via HTTP to the domains, and
  • If a connection fails, LiveUpdate tries to connect to one of the other listed domains. The listed domains may change because of server maintenance.
  • If LiveUpdate cannot make an HTTP connection, LiveUpdate connects via FTP to

Note: Symantec does not supply IP addresses for Symantec LiveUpdate servers. The server addresses are not static and, consequently, routing directly to an IP address may cause LiveUpdate to fail.


Which Communications Ports does Symantec Endpoint Protection use?

Best Practices: Configuring a Symantec Endpoint Protection environment in a DMZ

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

julesmane's picture

je repose ma question, j'ai un serveur central qui est connecté directement au site de symantes et fait régulièrement ses mise jour.

je souhaiterais configurer des fournisseurs de mise à jour en utilisant l'option "utiliser un serveur LiveUpdate interne spécifique"

en cliquant sur ajouter j'ai une fenêtre avec des chamos à renseigner:

NOM DU SERVEUR:.............................



NOM UTILISATEUR:.............................

MOT DE PASSE:...........................

merci de votre aide pour ces informations à renseigner surtout l'url.

James007's picture

Est-ce que cette url vous aider

Mise en place d'un serveur LiveUpdate interne

Article: HOWTO55180 | Créé le: 2011-06-29 | Mis à jour le: 2011-12-16 | Article URL


Configure liveupdate to run on Symantec Endpoint Protection Manager (SEPM)