Endpoint Protection

Hi.

I have the following configuration.

I have three (3) Management servers and one (1) sql server for the db.

One of the servers is in the corporate lan and has internet access the other two are in secure lans with no internet access and they can contact only their clients, all the managements servers and the sql server.

The problem:

The server that has internet access can update correctly but some times the second server for no reason tries to update from the internet and we get stuck with him trying to update ever after so I have to shutdown the servers in the secure lans, restart the server that has the internet access and after the server has downloaded and updated then I can start the other two.

This will works for 4-5 days then again we start over with the same problem.

Is there any way to set which server can update content from the internet?

Thanks

on the SEPM which do not need to connect to internet, Admin page >> Select your SEPM >> Edit the server properties >> Proxy Server tab

provide wrong proxy address, so that it cannot hit internet.

Pete is right.

Alternatively.Put a schedule which is in future date 10/10/2030 ::)

Hi.

The server that tries to update does not have proxy settings capable of downloading updates.

to Rafeeq: how can i do that ?

right, even if the proxy is not present, put wrong proxy server.

to schedule the LU to 2030 as posted, follow the link and set the "Select download start time window"

http://www.symantec.com/business/support/index?page=content&id=HOWTO54810

To configure the schedule for LiveUpdate downloads to Symantec Endpoint Protection Manager

1. In the console, click Admin.

2. On the Admin page, click System.

3. On the Admin page, under Tasks, click Edit the server properties.

4. In the Server Properties dialog box, on the LiveUpdate tab, click Edit Schedule.

5. Change the frequency and any other settings that you want to change.

6. Click OK

You can change the Schedule time.

Hi Vrakas,

On the two servers which cannot access the internet, follow these steps:

1. Add the following line into <SEPM installation folder>/tomcat/etc/conf.properties file:
   scm.server.liveupdate.disabled=true
2. Save the changes, and restart the SEPM service.

This will disable the ability to run LiveUpdate on those SEPMs.

More information is available here:

A Symantec Endpoint Protection Manager will not run LiveUpdate when multiple Symantec Endpoint Protection Managers exist in a site that is using Continuous LiveUpdate
 http://www.symantec.com/docs/TECH136648
 

That article gives a slightly different string to add to conf.properties- scm.server.liveupdate.disabled=1 

I believe either should work.

Please update this thread with news if this has been successful for you!
 

Hi, Open SEPM

1. In the console, click Admin.

2. On the Admin page, click System.

3. On the Admin page, under Tasks, click Edit the server properties.

4. In the Server Properties dialog box, on the LiveUpdate tab, click Edit Schedule.

5. Change the frequency and any other settings that you want to change.

6. Click OK