Video Screencast Help
Symantec Secure Login will be live on Connect starting February 25. Get the details here.

About LiveUpdate in Symantec Endpoint Protection version 12.1

Created: 03 Nov 2011 • Updated: 12 Dec 2011 | 1 comment
Language Translations
Mithun Sanghavi's picture
+5 5 Votes
Login to vote

As new LiveUpdate Engine (LUE) content management technology  is introduced with SEP 12.1, LiveUpdate is integrated with SEP 12.1.

LUE is a new feature introduced into Enterprise products with Symantec Endpoint Protection 12.1 in 2011. In SEP 12.1 clients, LUE replaces the traditional Windows Live Update (WLU) processes, files, directories and so on that were used in SAV and SEP 11.

NOTE!  The Symantec Endpoint Protection Manager (SEPM) still uses a Windows LiveUpdate client to download its materials from internet LiveUpdate servers (or from an internal LiveUpdate Administrator 2.x server).  The SEPM with a SEP 12.1 client will have both the WLU files (LuAll.exe, LuComServer_3_3.exe, LuCallbackProxy.exe, LuConfig.exe) and LUE libraries (LuEng.dll, LuSvc.dll, LuCtl.dll, LuSub.dll).

User-facing LU logs can be found in View Logs > Client Management > View Logs > System Log.

LUE downloads can be blocked if the license is no longer valid: a license is enforced when both its expiration date and grace period have passed.  Certain licensing conditions will disable all content and product updates: 

  • Enforced SBE Trial ware license

  • Enforced EE Trial ware license

  • Enforced SBE Paid license

When the license is expired, the LiveUpdate button is grayed out. A client system event is logged: "The license grace period is over and content downloading has stopped."

Client content id stored under "%APPDATA%\Definitions" - for example, "C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions."  If content becomes corrupted, LUE's Content Repair functions will attempt to reapply content either from SEPM or via LiveUpdate.

Running LiveUpdate for SEP 12.1 will update only SEP materials.  It will not also download updates for all the other Symantec products on the computer, as SEP 11 did.

More detailed information about why LiveUpdate failed can be found in the following log file:

C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Log.LiveUpdate

Check the following file for error in LiveUpdate.

C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Lue\Logs

Comments 1 CommentJump to latest comment