Video Screencast Help

URL's for default Symantec Liveupdate server

Created: 10 Oct 2013 • Updated: 10 Oct 2013 | 6 comments
ThaveshinP's picture
This issue has been solved. See solution.

What are the URL's required to be added to a proxy firewall server to allow a SEP client to get updates from the default Symantec liveupdate server?

Are there any ports as well to be allowed?

Comments 6 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

For Symantec Liveupdate, allow these urls - 

http://liveupdate.symantecliveupdate.com
http://liveupdate.symantec.com
ftp://update.symantec.com

Also, Check these Articles for making proper exceptions : 

How to Update the Proxy settings in the Symantec Endpoint Protection Manager (SEPM) 12.1

https://www-secure.symantec.com/connect/articles/how-configure-proxy-settings-symantec-endpoint-protection-manager-sepm-121

Required exclusions for proxy servers to allow Symantec Endpoint Protection to connect to Symantec reputation and licensing servers

http://www.symantec.com/docs/TECH162286

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Chetan Savade's picture

Hi,

Thank you for posting in Symantec community.

Make sure that the firewall allows the LiveUpdate executable to connect to the Internet through the correct ports and that the firewall allows connections to the correct domains. Read your firewall's documentation or contact the manufacturer to find out how to confirm these settings.

  • LiveUpdate connects over TCP ports 80 (HTTP), 21 (FTP) and 443 (HTTPS).
  • The file that connects to the Internet is LuComServer_*_*.exe in LiveUpdate 2.5 and later and Lucomserver.exe in LiveUpdate 2.0 and earlier.
  • The default folder for this file is C:\Program Files\Symantec\LiveUpdate.
  • LiveUpdate connects via HTTP to the domains liveupdate.symantecliveupdate.comliveupdate.symantec.com, and akamai.net.
  • If a connection fails, LiveUpdate tries to connect to one of the other listed domains. The listed domains may change because of server maintenance.
  • If LiveUpdate cannot make an HTTP connection, LiveUpdate connects via FTP to update.symantec.com/opt/content/onramp.

Note: Symantec does not supply IP addresses for Symantec LiveUpdate servers. The server addresses are not static and, consequently, routing directly to an IP address may cause LiveUpdate to fail.

Reference: http://www.symantec.com/docs/TECH139451

Which Communications Ports does Symantec Endpoint Protection use?

http://www.symantec.com/docs/TECH163787

Best Practices: Configuring a Symantec Endpoint Protection environment in a DMZ

http://www.symantec.com/docs/TECH178325

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

SOLUTION
julesmane's picture

je repose ma question, j'ai un serveur central qui est connecté directement au site de symantes et fait régulièrement ses mise jour.

je souhaiterais configurer des fournisseurs de mise à jour en utilisant l'option "utiliser un serveur LiveUpdate interne spécifique"

en cliquant sur ajouter j'ai une fenêtre avec des chamos à renseigner:

NOM DU SERVEUR:.............................

DESCRIPTION

URL:...............................

NOM UTILISATEUR:.............................

MOT DE PASSE:...........................

merci de votre aide pour ces informations à renseigner surtout l'url.

James007's picture

Est-ce que cette url vous aider

Mise en place d'un serveur LiveUpdate interne
Article: HOWTO55180 | Créé le: 2011-06-29 | Mis à jour le: 2011-12-16 | Article URL http://www.symantec.com/docs/HOWTO55180
 

Configure liveupdate to run on Symantec Endpoint Protection Manager (SEPM)

 https://www-secure.symantec.com/connect/articles/configure-liveupdate-run-client-computers