Endpoint Protection

 View Only
  • 1.  Using Internal LUA to update clients

    Posted Dec 15, 2015 08:43 AM

    Hi guys , I am using LUA version 2.3.4 in my envoirement for verification before migrating it to production envoirement. Here is exactly what is happening. I have set LUA correctly it downloaded definations . I have two SEPMs I configured them to download defs directly from the internal LUA which they did succuesfully. 

    However when I configured my clients to get defs directly from the internal LUA instead of SEPM for some reasons clients are not able to download them from LUA directly connectivity is there between machines and from the SEP endpoints I can telent to LUA  on port 7070.

     

    What could be the reasons for this ? Screenshot is attached

     

     

     

     



  • 2.  RE: Using Internal LUA to update clients

    Posted Dec 15, 2015 08:48 AM

    Did you configure the LUA in the policy?



  • 3.  RE: Using Internal LUA to update clients

    Posted Dec 15, 2015 08:56 AM

    Yes Brian , basics have already been done :)



  • 4.  RE: Using Internal LUA to update clients

    Posted Dec 15, 2015 09:03 AM

    Here is the client policy attached Brian . On the first screenshot you can see that client succesfully connected to the LUA ( 192.168.1.130) but it does not download the defs



  • 5.  RE: Using Internal LUA to update clients

    Posted Dec 15, 2015 09:56 AM
    Can you post lue.log from a client..might be firewall


  • 6.  RE: Using Internal LUA to update clients

    Trusted Advisor
    Posted Dec 15, 2015 10:03 AM

    In your download and distributon jobs within the LUA are you downloading the whole SEP file (Client & SEPM) or are you just downlaoding the SEPM update parts? 



  • 7.  RE: Using Internal LUA to update clients

    Posted Dec 16, 2015 01:07 AM

    Thanks for your reply Geo yeah you were right I was only downloading the content for SEPM.

     

    However I am wondering at the same time that how come the content defination size for SEP 12 RU6 is so high for example initially when I installed and tried to download all content it showed the size to be wopping 12.4 GB.  So I only selected SEPM 12 RU6 64 BIT which was around 5.5 GB and now when I selected to download SEP 12 RU6 Client 64 BIT it is showing me the size to be around 3.4 GB.

     

    Is the size will be always be like this when I try to download the content definations from the LUA daily. How com the size of defs is so big whereas when we try to download them via SEPM size is very less for the defs as compared to LUA.  Thanks and Regards



  • 8.  RE: Using Internal LUA to update clients

    Trusted Advisor
    Posted Dec 16, 2015 05:13 AM

    The SEPM still downloads the full content for it to be able to download to the various different OS's (so 32bit, 64bit, MAC etc) so the SEPM download will always be quite large as it pulls full def file, sonar all other defs. then after that it checks what it currently has downloaded when you select the extra items and tries to only download the additional bits it needs to allow those other elements to update you've selected. 

    As Symantec start to make improvements on defintions sizes you should see the sizes drop down but the SEPM will always need a full content download for it to be able to creat it's own deltas defs etc to distribute to the clients. Hope this helps.