LiveUpdate
DominikG
|
November 20th, 2009
I recognized something strange, which has been quite confusing for some of our customers. Actually the current version von Endpoint Protection (11 RU5) is published with two different version numbers. The packages, you receive through LiveUpdate are listed as 11.0.5002.0 in the Endpoint Protection Manager, but packages you create from other sources, e.g. downloads from Symantec’s fileconnect , are listed as 11.0.5002.333.
This fact makes it possible to import both versions into the Manager, if you received the packages through LiveUpdate onto your MR4 system and then upgrade it to RU5. After that you will see that four packages with the mentioned two different version numbers get listed under “install packages”.
Now, if you install the package with number 11.0.5002.0 onto a client, it gets actually also listed as installed version 11.0.5002.333. So the whole issue is just wrong information in the Manager, which the software cannot handle.
The problem is...
0 comments
dadajah
|
November 11th, 2009
Ok, I have ran into an issue with SEP on my personal desktop. It had apparently stopped updating definitions, so before realizing the communication error tried to uninstall and reinstall. Well that obviously did not work out as well as I thought it would. As I uninstalled and then tried to reinstall it, it kept saying had to complete other updates/installs before could complete installation. OK after getting nowhere with the numerous reboots tried again but install froze. So resorted to try a system restore and still no solution because now it show s it as installed but not working, so tried a repair. Now it gives me an warning saying that "It appears that the Symantec Management Client service is not running. You will not be able to manage network protection settings through the main user interface until it is running. Do you want to start the service now?" Well obviously yes. Ok and now iI get another...
26 comments
Patrick D
|
October 10th, 2009
Hi,
I can't figure out why Live Update isn't updating for Norton 360. It says "Your Norton product has the latest protection updates," but at the main page it says my definitions are not up to date. I'm not getting any error messages that indicate what exactly the problem is.
I read somewhere that re-installing it is necessary to fix this problem, however I'm not sure if I wish to do so because according to the license, it states that I can install it on two other pc's. I think it's a bit of a waste to re-install it just for Live Update. Unless re-installing doesn't count?
Is there a patch or something that specifically fixes this problem? Or do I have to change my settings? I have never touched any settings before and it was working.
If I could have help, I'd greatly appreciate it, and I'm sorry for choosing the wrong product if I did.
Thank you in advance.
5 comments
Dielmann
|
October 2nd, 2009
Hallo
During a live update from a local server with actual virus pattern I got the error code 235. I'm using Symantec scan engine 5.2
Some file can be copied properly. Some not.
Here is a part of the log file. I've changed our customer IP addresses.
What went wrong? Any ideas are welcome.
---- Start ---------------
:00:01 AM Downloading livetri.zip to /tmp/1254124801660/livetri.zip ...
Sep 28, 2009 8:00:01 AM Connecting to 100.100.100.100 via HTTP ...
Sep 28, 2009 8:00:01 AM Connected to 100.100.100.100 sending request ...
Sep 28, 2009 8:00:01 AM Waiting for response ...
Sep 28, 2009 8:00:01 AM Receiving file ...
Sep 28, 2009 8:00:01 AM Transfer completed in 122 ms (1,922,409 bytes/sec)
Sep 28, 2009 8:00:01 AM The zip entry is liveupdt.grd
Sep 28, 2009 8:00:02 AM The zip entry is liveupdt.sig
Sep 28, 2009 8:00:02 AM The zip entry is liveupdt.tri
Sep 28, 2009 8:00:02 AM Unzipping livetri.zip into /tmp/1254124801660 ...
Sep 28, 2009 8:00:02 AM The zip file downloaded is a catalog file...
3 comments
ChrisDownes
|
September 21st, 2009
We are running SMSMSE and the
installed version is 6.0.8.262
Latest update for installed version is 6.0.9.286
Currently available version is 6.0.9.286
When I click "download latest update" it opens the symantec site but says there are no updates for anything higher than v5
If I click the "update version status" liveupdate opens and says that all versions are up to date.
1 comments
rbuschmeyer
|
August 12th, 2009
I have 4 Mac (Intel) systems that are failing LiveUpdate on Virus Definitions only:
LiveUpdate would not complete the Virus Definitions install. I reinstalled SAV 10.2, but received the following two errors in succession:
Symantec AntiVirus Error
Symanted AntiVirus Auto-Protect could not load the scan engine. Please run LiveUpdate to get the latest version. (Code: 6)
Here is the Error we get on Live Update...
Updating Error
There was an error performing the update.
What we have done so far:
Repaired permissions on the startup volume
Reinstalled SAV 10.2
Attempted to run LiveUpdate as a customized update (Virus Definitions only)
Please advise...
2 comments
postmasterenato...
|
July 30th, 2009
I have a Client Security Symantec AntiVirus Version 10.1.5.5000, Scan Engine 81.3.0.13 . My ISP sify.com provided this AntiVirus after I have downloaded the intetned "Sify Broadband" client software.
The above AnitiVirus has an inbuilt LiveUpdate (Symantec Corporation) Version 3.5.0.64 as shown below. However, the Symantec LIveUpdate failed to update the software showing error LU1814, I have tried all support suggestions but no progress.
As I click on the error LU1814 it opens a support page and I have tried all its suggestion but still there is no progress. Finally, I have chatted with live Norton Support Analyst KiranKumar at " chat.symantec.com " who provided me a case number is 494103706. Then he said, 1) Open up Internet Explorer and then go to www.norton.com/connectme 2) Enter the [Connection Code] 214226 and click on submit. that I did. He further said, " I can connect to your computer and work to...
5 comments
gigi
|
July 30th, 2009
Hi,
some one can tell me how to configure a server with symantec endpoint protection to be able to distribute signatures for client?
I tried this:
In live update policy of the client,I checked on "use a live update server" and " use a specified internal update server" and I added the ip of the server "http:\\x.x.x.x"
but it didn't work
thanks
23 comments
The Coca-Cola Kid
|
July 28th, 2009
I know there were at least 20 viruses/trojans on this one machine from one of my corporate clients and got all them off but still the computer cannot connect to:
www.microsoft.com
www.mcaffee.com
www.symantec.com
and so cannot get latest Microsoft patches and most importantly cannot get latest Symantec virus definitions.
I manually downloaded virus def on another machine and updated them via USB flash drive. Have checked hosts file, DNS entries, windows firewall and even registry but still no luck connecting to any of those domains.
Anyone got some good ideas???
6 comments
Jon Sumida
|
June 26th, 2009
Just today my own PC running Vista and SEP 11.0.4000.2295 (SEPM is later release, but auto upgrade not working, but that's another thread to start later), I started getting a bunch of event log errors this morning. There are 2 errors. First one is:
59 LiveUpdate NT AUTHORITY\SYSTEM 6/25/2009 9:54 PM
Message: 6004: Internal authentication failed for the C:\ProgramData\Symantec\LiveUpdate\Downloads\Updt252\COHCOL.grd file.
Run LiveUpdate again as the cause may have been a transmission error. If the error persists, contact your network administrator or LiveUpdate provider.
Second message is the classic sescLU error event 13:
13 SescLU N/A 6/25/2009 9:54 PM
Category: The operation completed successfully.
Message: LiveUpdate returned a non-critical error. Available content updates may have failed to install.
These 2 errors keeps repeating themselves every now and then in pairs. I checked my definitions and they look up to date. All indicators are "green"...
4 comments
FC57
|
June 26th, 2009
Hi !
I have a strange problem with live update...
SEPM mr4 mp2 - windows 2003
I had a crash with my 2003 server and time was incorrect for a day : 5 february 2010 ! Live update try to download updates but timestamp was, of course, incorrect :
----------------------
5 février 2010 18:18:02 CET: LUALL.EXE a été lancé. [Site : EDU-UOH] [Serveur : endpoint]
5 février 2010 18:18:02 CET: LiveUpdate démarré. [Site : EDU-UOH] [Serveur : endpoint]
5 février 2010 18:18:01 CET: Le cachet de date de la nouvelle tentative est égal ou postérieur à la prochaine heure de planification. Passage à la planification régulière. [Site : EDU-UOH] [Serveur : endpoint]
5 février 2010 12:21:01 CET: Le cachet de date de la nouvelle tentative dépasse la fenêtre de nouvelle tentative maximale. Passage à la planification régulière. [Site : EDU-UOH] [Serveur :...
2 comments
TomSchroeder
|
June 26th, 2009
Gartner Information Security Summit, Sept 21-22, London, Royal Lancaster Hotel, UK
Visit Symantec - the Premier Sponsor at Gartner Information Security Summit and and learn how you can protect and manage today’s ever-growing variety of endpoints and systems—smartphones, laptops, mail servers, gateways, and more
The Gartner Information Security Summit will give you the information you need to create a layered approach combining risk management and compliance, secure business enablement and infrastructure protection. Hear the latest analysis revealing market trends, opportunities and threats to you and your organization.
Topics: Business Continuity Management, Customer Security and Privacy, Identity and Access Management, Infrastructure Protection, Managed Security Services, Mobile Security, Securing the Workplace, Security Management, Security Risk Management, Security Software
For further questions please contact Ilka Eimkemeier, EMEA Events (ilka_eimkemeier@symantec.com...
Agents, Altiris Client Management Suite, Emerging Threats, Security, Altiris Deployment Solution, Evolution of Security, Altiris IT Asset Management, Internet Security Threat Report, Altiris Notification Server, IT Risk Management, Altiris Recovery Solution, Drivers, LiveUpdate, Altiris Server Management Suite, Endpoint Management and Virtualization, Malicious Code, Inside Symantec, Online Fraud, Compatibility, Security Risks, Configuring, Spam, Vulnerabilities & Exploits, MS Exchange, Brightmail Gateway, VMware, Windows, Control Compliance Suite, Critical System Protection, Data Loss Prevention (Vontu), Reporting, Endpoint Protection (AntiVirus), Tip/How to, Endpoint Protection Small Business, Enterprise Security Manager, General Symantec, Hosted Mail Security, Mobile Security, Network Access Control, Security Information Manager, SecurityExpressions, Workspace Virtualization
2 comments
proff1982@yahoo...
|
June 24th, 2009
Hi, I am using Symantec Endpoint Protection 11.0 MP1. Currently I am facing some liveupdate issue. The error log is showing "server timeout". Any idea !! Thanks in advance.
5 comments
kchritton
|
June 24th, 2009
I have gone directly to the symantc website and downloaded updates, but Endpoint still shows definitionas are not up to date. When I try to "FIX", Endpoint can't see the server. Any suggestions?
4 comments
Giuseppe.Axia
|
June 24th, 2009
Hi,
A customer of mine (case ID 240-906-323) noticed that in unmanaged SEP clients (some servers out of his LAN), the daily schedule of LiveUpdate is not respected until the reboot of the machine (and it does ask to do it in a pop-up). SEP is a product for enterprises and it is expected that it does not ask the reboot just to arrange the LiveUpdate scheduling. Because there is not an internal procedure to submit a product enhancement requests... here's my question. Can we improve the LiveUpdate reliability?
Regards,
1 comments
Jim Jacobsen
|
June 23rd, 2009
Hello. I've got 3 problems trying to get SEP/SEPM working properly.
1. SEPM console says a client has a definition of 6/9/09, but when I log into the workstation, it's current with 6/22/09. Rebooting the PC and refreshing the console don't make a difference.
2. Liveupdate does not work automatically on SEPM. I have to manually run LUALL.exe to download my most recent signature files. I have done a lot of work on this in the past when neither Liveupdate or LUALL would work. Finally a new ISA build gave me some new access, but I'm only half-way there. What am I missing that I can try?
3. When I update my signature files and they are distributed to the network, several of the systems change from a working status to where AUTOPROTECT is off. The shield has a red circle on it. If I manually stop and restart the services, all is well. It also seems to happen only on Windows 2000 which I still have a few servers with that OS. ...
2 comments
Ouhlala
|
June 23rd, 2009
Hello,
Is there a new Liveupdate Administrator who will come out soon ?
The actual 2.2.1 is buggy, very heavy (cpu/mem usage...)...and very slow for just downloading/copying files...Don't you think ?
5 comments
Ouhlala
|
June 23rd, 2009
Hello,
I use LUA 2.2.1 for this symantec products:
- SAV 8.x, 9.x, 10.x
- SCS
- SEP11
- SAV Linux
Which means, that at first installation/download, LUA is downloading 3Gb of data over the internet (or a local server).
My problem is that over the internet, I can't adjust download speed, which can be really anoying if this LUA is outside our country with low bandwidth, because this software is creating something like 10 simultaneous connection and users can't work.
First, i install a local FTP server over my network (with filezilla) and control speed, but i've got a lot of "failed" while downloading (don't know why...).
First downloading seems to be only working over the internet with a real LiveUpdate server from Symantec...
So, my question is:
- Is is possible to manually copy def files from a working lua server to a new and fresh installed LUA server without any problems ?
- Is there a way to know why files are "failed" to download...
3 comments
Abhishek Pradhan
|
June 23rd, 2009
Question/Issue: What do I do in wherein installation Rolls back as the Domain/Local Administrator account does not have enough rights to write the Registry values?
Symptoms: Installation rolls back at the point "Writing Registry enteries"; Live update registration Failed; Error: 10 The LiveUpdate install failed;
Cause: Installation Rolls back as the Domain administrator or Local Administrator account doesn't have rights to write the values into the Registry.
Solution:
To resolve this issue follow the steps below:
1. Check if Windows Server 2003 Server Resource Kit Tools is installed. If it is not installed download and install Windows 2003 Server Resource Kit tools into the following location "C:\Program Files\Windows Resource Kit\Tools"
2. Download and install SubInACL into the following Location: C:\Program Files\Windows Resource Kit\Tools
3. Create a file named "reset.cmd" in C:\Program Files\Windows Resource Kits\Tools folder.
4. Edit the "reset....
11.x, Security, 10.x, LiveUpdate, Configuring, Installing, Reporting, Endpoint Protection (AntiVirus), Tip/How to
1 comments
SRK-DK
|
June 22nd, 2009
How do I update Threat Protection in a closed network environment.? I have a medium large setup with about 100 clients and 200 servers in a closed network with no connection to the Internet.
Is it possible to update Threat Protection without the system is connected to the Internet.?
6 comments
Lester
|
June 21st, 2009
I noticed that my client's virus definitions are almost a 1 week old (June 16, 2009). The current definitions on Symantec's website is June 21, 2009. On SEPM, I went to [Admin - Servers - Show LiveUpdate Downloads] and confirmed that the definitions are a bit outdated.
I initiated a manual download by going to [Download LiveUpdate Content - Download] but nothing happens. The status shows:
A scheduled LiveUpdate™ session is running. You cannot run another LiveUpdate session at this time. [Site: My Site] [Server: {server name}]
Download started. [Site: My Site] [Server:{server name}]
How can I update my SEPM's definitions so my clients can also be updated? Thanks in advance.
7 comments
Abhishek Pradhan
|
June 21st, 2009
G'day mates,
I've been trying to resolve this issue for a few days on a few of my test systems, and I finally got the culprit reponsible - Its a file called Ryan.exe, and the following are some very basic observations of mine regarding it's behaviour.
Undetected new Virus / trojan actual file name is Ryan.exe .
Hooks and integrates into Windows Explorer and calls itself as explorer.EXE in Tack Manager / ProcMon
Also corrupts all system restore points on WIndows XP computers and stores a hidden copy of itself at the following location - C\Recycle\X-5-4-27-2345678318-4567890223-4234567884-2341
Everytime a user logs onto the system it kills the native explorer and executes itself.
Also, it may be trying to spawn itself over the network. On Friday, I faced the issue of it killing explorer and DEP kicking in on only one system. Yesterday, it'd spread over my VLAN to 3 other test systems running XP. Systems running Vista, Windows 7 and Server OS's seem largely...
11.x, Security, 10.x, IT Risk Management, LiveUpdate, Security Risks, Reporting, Endpoint Protection (AntiVirus), Tip/How to
19 comments
Kedar Mohile
|
June 20th, 2009
Disk full message erroneously appears when downloading LiveUpdate updates
If your network environment already supports the proxy servers that are compliant with the HTTP 1.1 protocol or later, you can disregard this entry.
After you have tried to download LiveUpdate for the first time, the following message might appear:
"LU1863: Insufficient free disk space
There is not enough free disk space for LiveUpdate to operate properly. Please free up disk space on your computer and run LiveUpdate again."
You might have insufficient disk space. However, it is much more probable that this message appears in error because the proxy server is unable to send the correct Contents-Length header field.
This error message might appear on Symantec Endpoint Protection Manager, a Symantec Endpoint Protection client, or a Symantec Network Access Control client.
You should verify that the disk drive to which you downloaded LiveUpdate has sufficient disk space. If you verified that the disk...
Security, Evolution of Security, Basics, Best Practice, LiveUpdate, Configuring, Features, Installing, Performance, Reporting, Endpoint Protection (AntiVirus), Tip/How to, Upgrade
2 comments
toko
|
June 19th, 2009
If you have your Liveupdate policy for managed clients to use the default management server, does that mean there is no way to schedule when a managed client retrieves its updates?
If I look at the Schedule section, once the management server is selected everything in the Schedule area is greyed out.
And at the top it says
"Enable the scheduling of automatic downloads from LiveUpdate servers. The schedule settings to not control downloads from the default management server, from Group Update Providers, or from third party content management tools."
This seems to imply that once set to management server you will not be able to schedule when the clients do their updates. It is fully automatic and can be very unpredicatable.
What I'd like to see is the Management server viewed as an internal LiveUpdate Server and the capability to tell clients when to update. This would be very helpfull when servers are using the managed agent or in environments...
4 comments
Auusie
|
June 18th, 2009
Hi,
I am running 2 Sep servers on different location using a single clustered Database server. I have seen one strange problem with the SEP like after the restart the defination download fine without any problem but after like 20 days it stops automatically without giving any reason or error. But if i manually initiate a defination download from within the SEP console the defination downloads fine.
I think there is some maintaince happening after 20-30 days which is stopping the servers to download the defination files. the only error which i could find in the log files is this
19 June 2009 0:00:03: Database maintenance finished successfully. [Site: xx-sep11] [Server: SERVER1]
19 June 2009 0:00:02: Number of scan events swept: 2 [Site: xx-sep11] [Server: SERVER1]
19 June 2009 0:00:02: No old risk events got swept. [Site: xx-sep11] [Server: SERVER1]
19 June 2009 0:00:02: No physical files got swept. [Site: xx-sep11] [Server: SERVER1]
19 June 2009 0:00:01: No objects...
3 comments