Endpoint Protection

 View Only
Expand all | Collapse all

Clients's definition not up to date

Migration User

Migration UserApr 16, 2010 12:30 AM

Migration User

Migration UserApr 21, 2010 03:54 AM

Migration User

Migration UserApr 26, 2010 12:45 AM

  • 1.  Clients's definition not up to date

    Posted Apr 12, 2010 11:47 PM
    I have Endpoint Protection 11.0 MR4 MP2 and install Live Update on Windows 2003 SP2,
    most clients using Windows XP SP2/3

    for some reasons our clients's definition not up to date.
    check on live update server there are latest version downloaded
    but on clients not up to date even I did click/run live update on clients
    it said up to date but it was not
    any clues ?
    thanks


  • 2.  RE: Clients's definition not up to date

    Broadcom Employee
    Posted Apr 13, 2010 12:07 AM
    looks like definiiotn corruption. check the log.liveupdate log for information.

    Is the SEPM updated?

    How do clients gets the update?

    try manually updating the SEPM using the jdb file and see if clients starts downloading the definition ( provided the clients is configured to get the update from SEPM)


  • 3.  RE: Clients's definition not up to date

    Posted Apr 13, 2010 02:24 AM
    thanks pete, I did not find any error messages on liveupdate log.

    yes SEPM is updated but it takes directly from symantec live update not through our live update server.

    our client set up take update from llive update server



  • 4.  RE: Clients's definition not up to date

    Posted Apr 13, 2010 02:40 AM
    check if the groups not getting liveupdate are 64 bit clients
    check the LU policy to see if they are properly configured to get it from manager
    make sure the clients are communicating with the manager.


  • 5.  RE: Clients's definition not up to date

    Broadcom Employee
    Posted Apr 13, 2010 05:13 AM
    paste teh log.liveupdate from one of the client which has not been updated


  • 6.  RE: Clients's definition not up to date

    Posted Apr 13, 2010 09:36 AM
    Have the clients ever updated from your LiveUpdate server?


  • 7.  RE: Clients's definition not up to date

    Posted Apr 13, 2010 09:57 AM

    First of all check whether the Live update policy that has been created has been assigned to the client. Check the policy serial number at SEPM as well as the SEP client. They should be the same.  try changing the Liveupdate policy and check whether the client picks up the changed policy serial number.

    You mentioned that they are configured to take the updates from Live update server check whether the required ports are open at the server hosting the Live update

    On the SEP client enable the sylink.log and then we should be able to know  as to where is the client taking definitions from. Then we can troubleshoot further.


    How to enable Sylink Debugging for Symantec Endpoint Protection in the registry

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008041812561948


  • 8.  RE: Clients's definition not up to date

    Posted Apr 14, 2010 04:39 AM
    @blenahan, yes client has been updated before without any problem
    @sandip_sali, all clients have no problem with policy,
    now I set that group to update from symantec.com and they work,
    I only move about 5 clients to new group that I set to our live update server
    @pete, here log from one of the client
    seems to be client did not found any updates from live update server

    4/14/2010, 8:06:09 GMT -> LuComServer version: 3.3.0.85
    4/14/2010, 8:06:09 GMT -> LiveUpdate Language: English
    4/14/2010, 8:06:09 GMT -> LuComServer Sequence Number: 20090320
    4/14/2010, 8:06:09 GMT -> OS: Windows XP Professional, Service Pack: 3, Major: 5, Minor: 1, Build: 2600 (32-bit)
    4/14/2010, 8:06:09 GMT -> System Language:[0x0409], User Language:[0x0409]
    4/14/2010, 8:06:09 GMT -> IE 7 Support
    4/14/2010, 8:06:09 GMT -> ComCtl32 version: 6.0
    4/14/2010, 8:06:09 GMT -> IP Addresses: 10.3.16.148
    4/14/2010, 8:06:09 GMT -> Loading C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
    4/14/2010, 8:06:09 GMT -> Opened the product inventory at "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
    4/14/2010, 8:06:09 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
    4/14/2010, 8:06:09 GMT -> LiveUpdate flag value for this run is 0
    4/14/2010, 8:06:09 GMT -> ProductRegCom/luGroup(PID=540/TID=136): Successfully created an instance of an luGroup object!
    4/14/2010, 8:06:09 GMT -> ProductRegCom/luGroup(PID=540/TID=136): Path for calling process executable is C:\Program Files\Symantec\LiveUpdate\luall.exe.
    4/14/2010, 8:06:09 GMT -> ProductRegCom/luGroup(PID=540/TID=136): Destroyed luGroup object.
    4/14/2010, 8:06:09 GMT -> Scanning the following file for potentially malicious host entries: C:\WINDOWS\system32\Drivers\etc\hosts
    4/14/2010, 8:06:09 GMT -> Scanning the following file for potentially malicious host entries: C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
    4/14/2010, 8:06:09 GMT -> LiveUpdate did not find any malicious host entries in any hosts files.
    4/14/2010, 8:06:09 GMT -> **** Starting an Express Mode LiveUpdate Session ****
    4/14/2010, 8:06:09 GMT -> User Type: Administrator.
    4/14/2010, 8:06:10 GMT -> ***********************        Start of New LU Session        ***********************
    4/14/2010, 8:06:10 GMT -> EVENT - SESSION START EVENT - The LiveUpdate session is running in Express Mode.
    4/14/2010, 8:06:10 GMT -> Check for updates to:  Product: LiveUpdate, Version: 3.3.0.85, Language: English.  Mini-TRI file name: liveupdate_3.3.0.85_english_livetri.zip
    4/14/2010, 8:06:10 GMT -> LiveUpdate is about to launch a new callback proxy process for product SESC Virus Definitions Win32 v11 with moniker {C60DC234-65F9-4674-94AE-62158EFCA433}.
    4/14/2010, 8:06:10 GMT -> Starting Callback Proxy Worker thread.
    4/14/2010, 8:06:11 GMT -> The callback proxy for moniker {C60DC234-65F9-4674-94AE-62158EFCA433} was successfully registered with LiveUpdate.
    4/14/2010, 8:06:11 GMT -> LiveUpdate successfully launched a new callback proxy process for product SESC Virus Definitions Win32 v11.
    4/14/2010, 8:06:11 GMT -> LiveUpdate is about to execute a PreSession callback for product SESC Virus Definitions Win32 v11.
    4/14/2010, 8:06:11 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Successfully created an instance of an luProductReg object!
    4/14/2010, 8:06:11 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Path for calling process executable is C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe.
    4/14/2010, 8:06:12 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Setting property for Moniker = {B36CDA3C-B15B-421c-A2A4-7EC70E3B852B}, PropertyName = SEQ.HUBDEFS, Value = 91019019
    4/14/2010, 8:06:12 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Setting property for Moniker = {B36CDA3C-B15B-421c-A2A4-7EC70E3B852B}, PropertyName = SEQ.CURDEFS, Value = 91202024
    4/14/2010, 8:06:12 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Setting property for Moniker = {C60DC234-65F9-4674-94AE-62158EFCA433}, PropertyName = SEQ.CURDEFS, Value = 91202024
    4/14/2010, 8:06:12 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Destroyed luProductReg object.
    4/14/2010, 8:06:12 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Successfully created an instance of an luProductReg object!
    4/14/2010, 8:06:12 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Path for calling process executable is C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe.
    4/14/2010, 8:06:12 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Setting property for Moniker = {B36CDA3C-B15B-421c-A2A4-7EC70E3B852B}, PropertyName = VERSION, Value = MicroDefsB.Oct
    4/14/2010, 8:06:13 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Setting property for Moniker = {B36CDA3C-B15B-421c-A2A4-7EC70E3B852B}, PropertyName = SEQ.HUBDEFS, Value = 91019019
    4/14/2010, 8:06:13 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Setting property for Moniker = {B36CDA3C-B15B-421c-A2A4-7EC70E3B852B}, PropertyName = SEQ.CURDEFS, Value = 91202024
    4/14/2010, 8:06:13 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Destroyed luProductReg object.
    4/14/2010, 8:06:13 GMT -> The callback proxy finished executing the callback with a result code of 0x0
    4/14/2010, 8:06:13 GMT -> The PreSession callback for product SESC Virus Definitions Win32 v11 completed with a result of 0x0      
    4/14/2010, 8:06:13 GMT -> LiveUpdate is about to launch a new callback proxy process for product SESC IPS Signatures Win32 with moniker {D3769926-05B7-4ad1-9DCF-23051EEE78E3}.
    4/14/2010, 8:06:13 GMT -> The callback proxy for moniker {D3769926-05B7-4ad1-9DCF-23051EEE78E3} was successfully registered with LiveUpdate.
    4/14/2010, 8:06:13 GMT -> LiveUpdate successfully launched a new callback proxy process for product SESC IPS Signatures Win32.
    4/14/2010, 8:06:13 GMT -> LiveUpdate is about to execute a PreSession callback for product SESC IPS Signatures Win32.
    4/14/2010, 8:06:13 GMT -> ProductRegCom/luProductReg(PID=2720/TID=4012): Successfully created an instance of an luProductReg object!
    4/14/2010, 8:06:13 GMT -> ProductRegCom/luProductReg(PID=2720/TID=4012): Path for calling process executable is C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe.
    4/14/2010, 8:06:13 GMT -> ProductRegCom/luProductReg(PID=2720/TID=4012): Setting property for Moniker = {D3769926-05B7-4ad1-9DCF-23051EEE78E3}, PropertyName = SEQ.UPDATE, Value = 91125002
    4/14/2010, 8:06:13 GMT -> ProductRegCom/luProductReg(PID=2720/TID=4012): Destroyed luProductReg object.
    4/14/2010, 8:06:13 GMT -> The callback proxy finished executing the callback with a result code of 0x0
    4/14/2010, 8:06:13 GMT -> The PreSession callback for product SESC IPS Signatures Win32 completed with a result of 0x0      
    4/14/2010, 8:06:13 GMT -> LiveUpdate is about to launch a new callback proxy process for product Symantec Security Content B1 with moniker {E5A3EBEE-D580-421e-86DF-54C0B3739522}.
    4/14/2010, 8:06:13 GMT -> The callback proxy for moniker {E5A3EBEE-D580-421e-86DF-54C0B3739522} was successfully registered with LiveUpdate.
    4/14/2010, 8:06:13 GMT -> LiveUpdate successfully launched a new callback proxy process for product Symantec Security Content B1.
    4/14/2010, 8:06:13 GMT -> LiveUpdate is about to execute a PreSession callback for product Symantec Security Content B1.
    4/14/2010, 8:06:14 GMT -> ProductRegCom/luProductReg(PID=3948/TID=2020): Successfully created an instance of an luProductReg object!
    4/14/2010, 8:06:14 GMT -> ProductRegCom/luProductReg(PID=3948/TID=2020): Path for calling process executable is C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe.
    4/14/2010, 8:06:14 GMT -> ProductRegCom/luProductReg(PID=3948/TID=2020): Setting property for Moniker = {E5A3EBEE-D580-421e-86DF-54C0B3739522}, PropertyName = SEQ.CURDEFS, Value = 91201019
    4/14/2010, 8:06:14 GMT -> ProductRegCom/luProductReg(PID=3948/TID=2020): Destroyed luProductReg object.
    4/14/2010, 8:06:14 GMT -> The callback proxy finished executing the callback with a result code of 0x0
    4/14/2010, 8:06:14 GMT -> The PreSession callback for product Symantec Security Content B1 completed with a result of 0x0      
    4/14/2010, 8:06:14 GMT -> Successfully released callback {6FDEE0F0-ECD7-423C-BD1C-525ECBAC7E1B}
    4/14/2010, 8:06:14 GMT -> LiveUpdate has called the last callback for product Symantec Security Content B1, so LiveUpdate is informing the callback proxy that it can exit.
    4/14/2010, 8:06:14 GMT -> LiveUpdate is about to launch a new callback proxy process for product Symantec Security Content A1 with moniker {812CD25E-1049-4086-9DDD-A4FAE649FBDF}.
    4/14/2010, 8:06:14 GMT -> The callback proxy executable for product {E5A3EBEE-D580-421e-86DF-54C0B3739522} is exiting with no errors
    4/14/2010, 8:06:14 GMT -> The callback proxy for moniker {812CD25E-1049-4086-9DDD-A4FAE649FBDF} was successfully registered with LiveUpdate.
    4/14/2010, 8:06:14 GMT -> LiveUpdate successfully launched a new callback proxy process for product Symantec Security Content A1.
    4/14/2010, 8:06:14 GMT -> LiveUpdate is about to execute a PreSession callback for product Symantec Security Content A1.
    4/14/2010, 8:06:14 GMT -> ProductRegCom/luProductReg(PID=2656/TID=3728): Successfully created an instance of an luProductReg object!
    4/14/2010, 8:06:14 GMT -> ProductRegCom/luProductReg(PID=2656/TID=3728): Path for calling process executable is C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe.
    4/14/2010, 8:06:14 GMT -> ProductRegCom/luProductReg(PID=2656/TID=3728): Setting property for Moniker = {812CD25E-1049-4086-9DDD-A4FAE649FBDF}, PropertyName = SEQ.CURDEFS, Value = 91201019
    4/14/2010, 8:06:14 GMT -> ProductRegCom/luProductReg(PID=2656/TID=3728): Destroyed luProductReg object.
    4/14/2010, 8:06:14 GMT -> The callback proxy finished executing the callback with a result code of 0x0
    4/14/2010, 8:06:14 GMT -> The PreSession callback for product Symantec Security Content A1 completed with a result of 0x0      
    4/14/2010, 8:06:14 GMT -> Successfully released callback {6FDEE0F0-ECD7-423C-BD1C-525ECBAC7E1B}
    4/14/2010, 8:06:14 GMT -> LiveUpdate has called the last callback for product Symantec Security Content A1, so LiveUpdate is informing the callback proxy that it can exit.
    4/14/2010, 8:06:14 GMT -> Progress Update: TRYING_HOST: HostName: "cil-sepm02" URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod" HostNumber: 0
    4/14/2010, 8:06:14 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
    4/14/2010, 8:06:14 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.85_english_livetri.zip
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:14 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "Symantec LiveUpdate" AccessType: 0x0      
    4/14/2010, 8:06:14 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "msrS6vHwV1dha/XT083wIwK6ha8cXfFSwAAAAA" AccessType: 0x0      
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/liveupdate_3.3.0.85_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:14 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/liveupdate_3.3.0.85_english_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\liveupdate_3.3.0.85_english_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:14 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:14 GMT -> The callback proxy executable for product {812CD25E-1049-4086-9DDD-A4FAE649FBDF} is exiting with no errors
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:14 GMT -> LiveUpdate will check for Mini-TRI file support on the server since the first Mini-TRI file was not available (liveupdate_3.3.0.85_english_livetri.zip).
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/minitri.flg", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:14 GMT -> HttpSendRequest (status 200): Request succeeded
    4/14/2010, 8:06:14 GMT -> Download complete: Original estimated file size: 1; Actual bytes downloaded: 1
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/minitri.flg", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\minitri.flg" HR: 0x0      
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 1
    4/14/2010, 8:06:14 GMT -> Progress Update: HOST_SELECTED: Host IP: "10.3.3.8" URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod" HostNumber: 0
    4/14/2010, 8:06:14 GMT -> Attempting to load SymCrypt...
    4/14/2010, 8:06:14 GMT -> SymCrypt.dll does not exist.
    4/14/2010, 8:06:14 GMT -> EVENT - SERVER SELECTION SUCCESSFUL EVENT - LiveUpdate connected to server cil-sepm02.jisedu.or.id at path /clu-prod via a HTTP connection. The server connection connected with a return code of 200, Successfully download TRI file
    4/14/2010, 8:06:14 GMT -> LiveUpdate is connected to a server with Mini-TRI file support.  LiveUpdate will download and process the remaining Mini-TRI files.
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: Automatic LiveUpdate, Version: 3.3.0.85, Language: English.  Mini-TRI file name: automatic$20liveupdate_3.3.0.85_english_livetri.zip
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: Decomposer, Version: 1.0.0, Language: SymAllLanguages.  Mini-TRI file name: decomposer_1.0.0_symalllanguages_livetri.zip
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: Symevent Installer, Version: 12.5, Language: SymAllLanguages.  Mini-TRI file name: symevent$20installer_12.5_symalllanguages_livetri.zip
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: MS Light, Version: 5.0, Language: SymAllLanguages.  Mini-TRI file name: ms$20light_5.0_symalllanguages_livetri.zip
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: SESC Virus Definitions Win32 v11, Version: MicroDefsB.CurDefs, Language: SymAllLanguages.  Mini-TRI file name: sesc$20virus$20definitions$20win32$20v11_microdefsb.curdefs_symalllanguages_livetri.zip
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: SESC Virus Definitions Win32 v11, Version: MicroDefsB.Oct, Language: SymAllLanguages.  Mini-TRI file name: sesc$20virus$20definitions$20win32$20v11_microdefsb.oct_symalllanguages_livetri.zip
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: SESC Submission Control Data, Version: 11.0, Language: SymAllLanguages.  Mini-TRI file name: sesc$20submission$20control$20data_11.0_symalllanguages_livetri.zip
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: SESC IPS Signatures Win32, Version: 11.0, Language: SymAllLanguages.  Mini-TRI file name: sesc$20ips$20signatures$20win32_11.0_symalllanguages_livetri.zip
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: SESC AntiVirus Client Win32, Version: 11.0, Language: English.  Mini-TRI file name: sesc$20antivirus$20client$20win32_11.0_english_livetri.zip
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: Symantec Known Application System, Version: 1.5.0, Language: SymAllLanguages.  Mini-TRI file name: symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: SEP PTS Engine Win32, Version: 6.1.0, Language: SymAllLanguages.  Mini-TRI file name: sep$20pts$20engine$20win32_6.1.0_symalllanguages_livetri.zip
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: SEP PTS Content, Version: 6.1.0, Language: SymAllLanguages.  Mini-TRI file name: sep$20pts$20content_6.1.0_symalllanguages_livetri.zip
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: Symantec Security Content B1, Version: MicroDefsB.CurDefs, Language: SymAllLanguages.  Mini-TRI file name: symantec$20security$20content$20b1_microdefsb.curdefs_symalllanguages_livetri.zip
    4/14/2010, 8:06:14 GMT -> Check for updates to:  Product: Symantec Security Content A1, Version: MicroDefsB.CurDefs, Language: SymAllLanguages.  Mini-TRI file name: symantec$20security$20content$20a1_microdefsb.curdefs_symalllanguages_livetri.zip
    4/14/2010, 8:06:14 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
    4/14/2010, 8:06:14 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 14 Downloading Mini-TRI files
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/automatic$20liveupdate_3.3.0.85_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:14 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/automatic$20liveupdate_3.3.0.85_english_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\automatic$20liveupdate_3.3.0.85_english_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:14 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/decomposer_1.0.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:14 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/decomposer_1.0.0_symalllanguages_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\decomposer_1.0.0_symalllanguages_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:14 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:14 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/symevent$20installer_12.5_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/symevent$20installer_12.5_symalllanguages_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\symevent$20installer_12.5_symalllanguages_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/ms$20light_5.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/ms$20light_5.0_symalllanguages_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\ms$20light_5.0_symalllanguages_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sesc$20virus$20definitions$20win32$20v11_microdefsb.curdefs_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sesc$20virus$20definitions$20win32$20v11_microdefsb.curdefs_symalllanguages_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\sesc$20virus$20definitions$20win32$20v11_microdefsb.curdefs_symalllanguages_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sesc$20virus$20definitions$20win32$20v11_microdefsb.oct_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sesc$20virus$20definitions$20win32$20v11_microdefsb.oct_symalllanguages_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\sesc$20virus$20definitions$20win32$20v11_microdefsb.oct_symalllanguages_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sesc$20submission$20control$20data_11.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sesc$20submission$20control$20data_11.0_symalllanguages_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\sesc$20submission$20control$20data_11.0_symalllanguages_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sesc$20ips$20signatures$20win32_11.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sesc$20ips$20signatures$20win32_11.0_symalllanguages_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\sesc$20ips$20signatures$20win32_11.0_symalllanguages_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sesc$20antivirus$20client$20win32_11.0_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sesc$20antivirus$20client$20win32_11.0_english_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\sesc$20antivirus$20client$20win32_11.0_english_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sep$20pts$20engine$20win32_6.1.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sep$20pts$20engine$20win32_6.1.0_symalllanguages_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\sep$20pts$20engine$20win32_6.1.0_symalllanguages_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sep$20pts$20content_6.1.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/sep$20pts$20content_6.1.0_symalllanguages_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\sep$20pts$20content_6.1.0_symalllanguages_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/symantec$20security$20content$20b1_microdefsb.curdefs_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/symantec$20security$20content$20b1_microdefsb.curdefs_symalllanguages_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\symantec$20security$20content$20b1_microdefsb.curdefs_symalllanguages_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/symantec$20security$20content$20a1_microdefsb.curdefs_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/14/2010, 8:06:15 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:8080/clu-prod/symantec$20security$20content$20a1_microdefsb.curdefs_symalllanguages_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\symantec$20security$20content$20a1_microdefsb.curdefs_symalllanguages_livetri.zip" HR: 0x802A0026
    4/14/2010, 8:06:15 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
    4/14/2010, 8:06:15 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
    4/14/2010, 8:06:15 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"
    4/14/2010, 8:06:15 GMT -> ********* Finished Finding Available Updates *********
    4/14/2010, 8:06:15 GMT -> LiveUpdate did not find any new updates for the given products.
    4/14/2010, 8:06:15 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Express Mode. LiveUpdate found 0 updates available, of which 0 were installed and 0 failed to install.  The LiveUpdate session exited with a return code of 100, LiveUpdate ran successfully.  There are no new updates to your products.
    4/14/2010, 8:06:15 GMT -> ProductRegCom/luGroup(PID=540/TID=136): Successfully created an instance of an luGroup object!
    4/14/2010, 8:06:15 GMT -> ProductRegCom/luGroup(PID=540/TID=136): Path for calling process executable is C:\Program Files\Symantec\LiveUpdate\luall.exe.
    4/14/2010, 8:06:15 GMT -> ProductRegCom/luGroup(PID=540/TID=136): Destroyed luGroup object.
    4/14/2010, 8:06:18 GMT -> LiveUpdate is about to execute a PostSession callback for product SESC Virus Definitions Win32 v11.
    4/14/2010, 8:06:19 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Successfully created an instance of an luProductReg object!
    4/14/2010, 8:06:19 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Path for calling process executable is C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe.
    4/14/2010, 8:06:20 GMT -> ProductRegCom/luProductReg(PID=1260/TID=3548): Destroyed luProductReg object.
    4/14/2010, 8:06:20 GMT -> The callback proxy finished executing the callback with a result code of 0x0
    4/14/2010, 8:06:20 GMT -> The PostSession callback for product SESC Virus Definitions Win32 v11 completed with a result of 0x0      
    4/14/2010, 8:06:20 GMT -> Successfully released callback {855BA5F4-6588-4F09-AE61-847E59D08CB0}
    4/14/2010, 8:06:20 GMT -> LiveUpdate has called the last callback for product SESC Virus Definitions Win32 v11, so LiveUpdate is informing the callback proxy that it can exit.
    4/14/2010, 8:06:20 GMT -> LiveUpdate is about to execute a PostSession callback for product SESC IPS Signatures Win32.
    4/14/2010, 8:06:20 GMT -> The callback proxy executable for product {C60DC234-65F9-4674-94AE-62158EFCA433} is exiting with no errors
    4/14/2010, 8:06:20 GMT -> ProductRegCom/luProductReg(PID=2720/TID=4012): Successfully created an instance of an luProductReg object!
    4/14/2010, 8:06:20 GMT -> ProductRegCom/luProductReg(PID=2720/TID=4012): Path for calling process executable is C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe.
    4/14/2010, 8:06:20 GMT -> ProductRegCom/luProductReg(PID=2720/TID=4012): Destroyed luProductReg object.
    4/14/2010, 8:06:20 GMT -> The callback proxy finished executing the callback with a result code of 0x0
    4/14/2010, 8:06:20 GMT -> The PostSession callback for product SESC IPS Signatures Win32 completed with a result of 0x0      
    4/14/2010, 8:06:20 GMT -> Successfully released callback {855BA5F4-6588-4F09-AE61-847E59D08CB0}
    4/14/2010, 8:06:20 GMT -> LiveUpdate has called the last callback for product SESC IPS Signatures Win32, so LiveUpdate is informing the callback proxy that it can exit.
    4/14/2010, 8:06:20 GMT -> The callback proxy executable for product {D3769926-05B7-4ad1-9DCF-23051EEE78E3} is exiting with no errors@Rafeeq, none of them 64 bit clients,
    LU policy is correct to get from manager,
    client can ping and reply to the manager


  • 9.  RE: Clients's definition not up to date

    Posted Apr 14, 2010 09:35 AM
    Have the clients ever updated from your LU server?  Is this something that stopped working or never started working?


  • 10.  RE: Clients's definition not up to date

    Posted Apr 16, 2010 12:28 AM
    to blenahan, yes client has been updated before without any problem
    t
    his is something stop working
    to sandip_sali, all clients have no problem with policy,
    now I set that group to update from symantec.com and they work,
    I only move about 5 clients to new group that I set to our live update server that not work


     


  • 11.  RE: Clients's definition not up to date

    Posted Apr 16, 2010 12:30 AM
      |   view attached
    see my attachment
    thanks in advanced for all your help

    Attachment(s)

    doc
    minilab_pc16.doc   737 KB 1 version


  • 12.  RE: Clients's definition not up to date

    Posted Apr 16, 2010 09:43 AM
    Like Pete said, you could have definition corruption.  This link walks you through fixing them
    http://service1.symantec.com/support/ent-security.nsf/docid/2007123111551948


  • 13.  RE: Clients's definition not up to date

    Posted Apr 18, 2010 09:23 PM
    to blenahan, do you mean LUA  has definition corruption ?
    I did uninstall and reinstall LUA, and download again the definition
    but anyway I will try it


  • 14.  RE: Clients's definition not up to date

    Posted Apr 18, 2010 10:18 PM
    just did clear out corrupted definitions from client
    - run LiveUpdate
    - connecting to our LUA
    - STILL give the same message said "all symantec products are uptodate"
    BUT the fact client's definition remain empty after clear out


  • 15.  RE: Clients's definition not up to date

    Posted Apr 18, 2010 10:20 PM

    Give it some time, they should show up. Every time I clear corrupted defs, it has taken anywhere from 5-20 minutes to show correctly on the client.


  • 16.  RE: Clients's definition not up to date

    Posted Apr 19, 2010 04:18 AM
    it has been more than 5 hours BUT still not get update :(


  • 17.  RE: Clients's definition not up to date

    Broadcom Employee
    Posted Apr 19, 2010 05:17 AM
    there seems to be lot of 404 errors in the log file. Can you browse the definition from the client machines? http://CIL-SEPM02.jisedu.or.id:7070/clu-prod/


    HttpSendRequest (status 404): Request failed - File does not exist on the server.
    4/16/2010, 3:51:11 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://CIL-SEPM02.jisedu.or.id:7070/clu-prod/symantec$20security$20content$20a1_microdefsb.curdefs_symalllanguages_livetri.zip", Full Download Path: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\symantec$20security$20content$20a1_microdefsb.curdefs_symalllanguages_livetri.zip" HR: 0x802A0026





  • 18.  RE: Clients's definition not up to date

    Posted Apr 20, 2010 12:32 AM
    I can browse to clu-prod from client BUT did not find anything except minitri.flg
    seems to be distribution not working, is that true ?


  • 19.  RE: Clients's definition not up to date

    Broadcom Employee
    Posted Apr 20, 2010 12:39 AM
    yes, you should be able to see the defeinition sets as well. If you see ONLY .flg file that means there is no content to distribute. Hence clients not getting the updates.


  • 20.  RE: Clients's definition not up to date

    Posted Apr 20, 2010 01:06 AM
    BUT download and distribution status are complete successfully,
    so what is wrong with that ?
    I checked download folder that I setup for LUA and I found definitions are there
    so download is working even though in last few days always failed but I manage to run manually until successfully.
    what setup that I need to take a look for distribution ?
    I assume that this one that make a problem


  • 21.  RE: Clients's definition not up to date

    Broadcom Employee
    Posted Apr 20, 2010 01:08 AM
    IIS home directory is the one which you might be intersted to look into.


  • 22.  RE: Clients's definition not up to date

    Posted Apr 20, 2010 04:06 AM
    I tried restart IIS service,
    run download and distribution manually

    now from client can see definitions of clu-prod
    BUT still when I run live update it said all symantec products are up to date :(


  • 23.  RE: Clients's definition not up to date

    Broadcom Employee
    Posted Apr 20, 2010 04:11 AM
    Did you check if the definition downloaded in clu-prod has the latest definition set?

    can you copy any of the file on the client when browsed?



  • 24.  RE: Clients's definition not up to date

    Posted Apr 20, 2010 04:32 AM
      |   view attached
    I think clu-prod has the latest version already
    here one of the file

    Attachment(s)



  • 25.  RE: Clients's definition not up to date

    Posted Apr 20, 2010 04:48 AM
    change the setting for clients to get it from SEPM;
    once updated clear it and put back LU server.


  • 26.  RE: Clients's definition not up to date

    Broadcom Employee
    Posted Apr 20, 2010 04:49 AM

    i believe you have not selected the SEP content, to me it looks like "1271742724jtun_nav2k8en100419021.zip" is meant for Norton , not for SEP.

    You may need to check again with the downloads you have selected for!



  • 27.  RE: Clients's definition not up to date

    Posted Apr 20, 2010 12:57 PM

    I know that is boob...but, do you checked the firewall of clients??
    Try a test of communication with "telnet" on port 8014 or verify with sniffer the clients when you makes LiveUpdate.
     



  • 28.  RE: Clients's definition not up to date

    Posted Apr 20, 2010 09:59 PM
      |   view attached
    to Rafeeq, I did that BUT once I go back to LU server, clients did not get update again
    saying that all symantec products are up to date
     
    to Pete, from download log it said SESM Virus Def Win32 v11, you can see screenshot that I attach
     
    to Renato, I don't think caused by firewall
    at least now when I reinstall the SEP at that client get updates from LU server
    BUT only for Proactive and Network Threat Protection, Antivirus and Antispyware Protection NOT up to date


  • 29.  RE: Clients's definition not up to date

    Broadcom Employee
    Posted Apr 21, 2010 03:20 AM
    ok, looks like communication issue. RUn manual liveupdate on client and post the log.liveupdate to see where it fails.


  • 30.  RE: Clients's definition not up to date

    Posted Apr 21, 2010 03:54 AM
      |   view attached
    here the client log

    Attachment(s)

    txt
    log2.txt   39 KB 1 version


  • 31.  RE: Clients's definition not up to date

    Broadcom Employee
    Posted Apr 21, 2010 06:55 AM
    the definition set the client is looking for


    4/21/2010, 7:45:04 GMT -> EVENT - SERVER SELECTION SUCCESSFUL EVENT - LiveUpdate connected to server cil-sepm02.jisedu.or.id at path /clu-prod via a HTTP connection. The server connection connected with a return code of 200, Successfully download TRI file
    4/21/2010, 7:45:04 GMT -> LiveUpdate is connected to a server with Mini-TRI file support.  LiveUpdate will download and process the remaining Mini-TRI files.
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: Automatic LiveUpdate, Version: 3.3.0.85, Language: English.  Mini-TRI file name: automatic$20liveupdate_3.3.0.85_english_livetri.zip
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: Symantec Known Application System, Version: 1.5.0, Language: SymAllLanguages.  Mini-TRI file name: symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: Decomposer, Version: 1.0.0, Language: SymAllLanguages.  Mini-TRI file name: decomposer_1.0.0_symalllanguages_livetri.zip
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: Symevent Installer, Version: 12.5, Language: SymAllLanguages.  Mini-TRI file name: symevent$20installer_12.5_symalllanguages_livetri.zip
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: MS Light, Version: 5.0, Language: SymAllLanguages.  Mini-TRI file name: ms$20light_5.0_symalllanguages_livetri.zip
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: SESC Virus Definitions Win32 v11, Version: MicroDefsB.CurDefs, Language: SymAllLanguages.  Mini-TRI file name: sesc$20virus$20definitions$20win32$20v11_microdefsb.curdefs_symalllanguages_livetri.zip
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: SESC Virus Definitions Win32 v11, Version: MicroDefsB.Old, Language: SymAllLanguages.  Mini-TRI file name: sesc$20virus$20definitions$20win32$20v11_microdefsb.old_symalllanguages_livetri.zip
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: SESC Submission Control Data, Version: 11.0, Language: SymAllLanguages.  Mini-TRI file name: sesc$20submission$20control$20data_11.0_symalllanguages_livetri.zip
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: SESC IPS Signatures Win32, Version: 11.0, Language: SymAllLanguages.  Mini-TRI file name: sesc$20ips$20signatures$20win32_11.0_symalllanguages_livetri.zip
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: SESC AntiVirus Client Win32, Version: 11.0, Language: English.  Mini-TRI file name: sesc$20antivirus$20client$20win32_11.0_english_livetri.zip
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: SEP PTS Engine Win32, Version: 6.1.0, Language: SymAllLanguages.  Mini-TRI file name: sep$20pts$20engine$20win32_6.1.0_symalllanguages_livetri.zip
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: SEP PTS Content, Version: 6.1.0, Language: SymAllLanguages.  Mini-TRI file name: sep$20pts$20content_6.1.0_symalllanguages_livetri.zip
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: Symantec Security Content B1, Version: MicroDefsB.CurDefs, Language: SymAllLanguages.  Mini-TRI file name: symantec$20security$20content$20b1_microdefsb.curdefs_symalllanguages_livetri.zip
    4/21/2010, 7:45:04 GMT -> Check for updates to:  Product: Symantec Security Content A1, Version: MicroDefsB.CurDefs, Language: SymAllLanguages.  Mini-TRI file name: symantec$20security$20content$20a1_microdefsb.curdefs_symalllanguages_livetri.zip
    4/21/2010, 7:45:04 GMT -> Progress Update: TRIFILE_DOWNLOAD_END: Number of TRI files: "0"



    IPS could download definition successfully
    4/21/2010, 7:45:04 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://CIL-SEPM02.jisedu.or.id:7070/clu-prod/sesc$20ips$20signatures$20win32_11.0_symalllanguages_livetri.zip", Estimated Size: 0, Destination Folder: "C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads"
    4/21/2010, 7:45:05 GMT -> HttpSendRequest (status 200): Request succeeded
    4/21/2010, 7:45:05 GMT -> Download complete: Original estimated file size: 2676; Actual bytes downloaded: 2676



    Virus definition still showed 404 error.
    Manually download the jdb file on the client for updates and see if it can update ( in case of corruption).

    Open a case with Symantec support


  • 32.  RE: Clients's definition not up to date

    Posted Apr 22, 2010 10:41 PM
    hi Pete,
    I found that some files on testing folder NOT on production folder, this is weird,
    status of distribution to testing and production is complete BUT not all files push to production folder AND there are virus definitions who missing, no wonder client did not get update.
    - so I copy them from testing folder to clu-prod
    - run again liveupdate from client
    - now that client GET update
    - I change now setting for distribution ONLY to production and skip test
    see what happen then ...

    I did open case with symantec support before but no good solution so far,
    in fact that we have a problem wih our side to connect to symantec.webex when he need to remote our lu machine / client machine

    at least I got a good progress from this forum
    thanks a lot to all




  • 33.  RE: Clients's definition not up to date

    Broadcom Employee
    Posted Apr 22, 2010 11:47 PM
    yes, good finding and test ..
    thats shows the clu- test haved the files but not processsed on clu-prod. after copying the filesthe system got updated.

    You may try reinstalling the Live update administrator as suggested by symantec in KB article

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007110713575648



  • 34.  RE: Clients's definition not up to date

    Posted Apr 23, 2010 12:16 AM
    actually when we first met problem before
    I did reinstall LUA from version 1 to version 2.2.1.16
    I know there is a newer version of LUA available
    but I will try later after I evaluate about a week to see the progress from other clients


  • 35.  RE: Clients's definition not up to date

    Posted Apr 23, 2010 01:32 AM
    I think there is some mistakes in the configuration of LUA
    First go to configure-->distribution centers edit the production distribution center and assure that you given correct details(Ip address and the root directory name).
    Then go to Download and distribute--->schedule edit the distribution center and assure that you selected production and correct subset name.
    If not helps  reconfigure the server according to this doc
    Downloading and hosting the Symantec Endpoint Protection Manager (SEPM) 2010 definitions patch via LiveUpdate Administrator 2.x (LUA 2.x) and LiveUpdate Administration Utility 1.x (LUAU 1.x)


  • 36.  RE: Clients's definition not up to date

    Posted Apr 26, 2010 12:35 AM
    hi Aravind,
    the configuration for download and distribute are okay.
    now LU machine is working fine


  • 37.  RE: Clients's definition not up to date

    Posted Apr 26, 2010 12:45 AM
    Happy to hear your problem got solved.


  • 38.  RE: Clients's definition not up to date

    Posted Aug 15, 2010 06:55 AM
      |   view attached
    Hi sandip,

    Please find the sylink log files generated on the problematic system .

    Attachment(s)

    zip
    Sylink.zip   30 KB 1 version