Hi man.

I need your helpn again:

27 Ноябрь 2014 г. 15:20:07 ALMT:  LiveUpdate failed.  [Site: Site Almapps9]  [Server: Symantec2012]
27 Ноябрь 2014 г. 15:20:07 ALMT:  LUALL.EXE finished running.  [Site: Site Almapps9]  [Server: Symantec2012]
27 Ноябрь 2014 г. 15:20:07 ALMT:  LiveUpdate encountered one or more errors. Return code = 4.  [Site: Site Almapps9]  [Server: Symantec2012]
27 Ноябрь 2014 г. 15:20:03 ALMT:  LUALL.EXE has been launched.  [Site: Site Almapps9]  [Server: Symantec2012]
27 Ноябрь 2014 г. 15:20:03 ALMT:  Download started.  [Site: Site Almapps9]  [Server: Symantec2012]

Error Code 4 means proxy issue

Error: "LiveUpdate encountered one or more errors. Return code = 4" in Endpoint Protection Manager

http://www.symantec.com/business/support/index?page=content&id=TECH103112

Are you using proxy ?

Reinstall LiveUpdate for Endpoint Protection Manager 12.1

Article:TECH171060

|

Created: 2011-10-04

|

Updated: 2014-11-24

|

Article URL http://www.symantec.com/docs/TECH171060

Error: "LiveUpdate encountered one or more errors. Return code = 4" in Endpoint Protection Manager

Article:TECH103112

|

Created: 2007-01-17

|

Updated: 2014-11-24

|

Article URL http://www.symantec.com/docs/TECH103112

We have our SEP from local Live update and so

You can try above steps and check it's working or not.

Why we need to delete LUA, if its update from symantec live update?

You don't delete Lua You need to Uninstall and re-install LiveUpdate for SEPM server.

http://www.symantec.com/business/support/index?page=content&id=TECH171060

Installing SEPM Virus Definitions Win32 12.1 RU2 H (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Virus Definitions Win64 (x64) 12.1 RU2 H (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM SRTSP Settings (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content A1 (1 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content A1 (2 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content A1-64 (1 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content A1-64 (2 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content B1 (1 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content B1 (2 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content B1-64 (1 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM Symantec Security Content B1-64 (2 of 2), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM IPS Signatures Win32 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SESM IPS Signatures Win64 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM CIDS Signatures 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Submission Control Data (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Iron Whitelist 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.
Installing SEPM Iron Revocation List 12.1 RU2 (1 of 1), failed.
LU1825: LiveUpdate could not understand how to install this update.  You may need to get the latest version of LiveUpdate before you can install this update.

Installation failed, error summary...
LU1806: LiveUpdate downloaded all of the updates you requested, but all of them failed to install.  Please try to get the updates at a later time.

LiveUpdate session is complete.

Download latest SEPM Live update version after install once restart SEPM server and check again

 

http://www.symantec.com/business/support/index?page=content&id=TECH181305

 

Reinstall LiveUpdate for Endpoint Protection Manager 12.1

Article:TECH171060

|

Created: 2011-10-04

|

Updated: 2014-11-24

|

Article URL http://www.symantec.com/docs/TECH171060

27 Ноябрь 2014 г. 16:57:58 ALMT:  LiveUpdate failed.  [Site: Site Almapps9]  [Server: Symantec2012]
27 Ноябрь 2014 г. 16:57:58 ALMT:  LUALL.EXE finished running.  [Site: Site Almapps9]  [Server: Symantec2012]
27 Ноябрь 2014 г. 16:57:58 ALMT:  LiveUpdate encountered one or more errors. Return code = 4.  [Site: Site Almapps9]  [Server: Symantec2012]
27 Ноябрь 2014 г. 16:54:16 ALMT:  LUALL.EXE has been launched.  [Site: Site Almapps9]  [Server: Symantec2012]
27 Ноябрь 2014 г. 16:54:16 ALMT:  Download started.  [Site: Site Almapps9]  [Server: Symantec2012]

uninstall Liveupdate from add/remove programs

remove all the liveupdate folder ( do a search on windows )

do a repair of SEPM from add/remove programs

lucatalog-cleanup

lucatlog-forceupdate

click on start

run 

type Luall.exe

try to download only small updates.

quite so I also made, but not help it

 

Latest from Symantec:	27.11.2014 r4
Latest on Manager:	20.11.2014 r39

Are using proxy ?

If yes please allow full internet for testing purpose.

Yes we use proxy, but there have full access and its work 7 days ago. We not change nothing

And we download update from local host liveupdate

Tell me pls-what does it mean: Latest from Symantec: 27.11.2014 r4  Latest on Manager:20.11.2014 r39 

Tell me pls-what does it mean: Latest from Symantec: 27.11.2014 r4  Latest on Manager:20.11.2014 r39

Does your client having latest defination ?

May be your all client are update only 20 nov.

Clients have update only 20 nov(((( How we can update their till update 27 nov(( i dont know

.
	28.11.14 3:21:11 GMT+06:00	Download	informational	admin	Started download of content for request id 3061 started by user admin.
	28.11.14 2:00:05 GMT+06:00	Schedule	informational	admin	Download schedule Update started.
	28.11.14 0:41:55 GMT+06:00	Distribution Center Cleanup	informational	LUA Startup	Successfully purged old contents on server Default Production Distribution Center. Total of 64 updates were purged.
	28.11.14 0:41:55 GMT+06:00	Distribution Center Cleanup	informational	LUA Startup	Successfully purged old contents on server Default Testing Distribution Center. Total of 64 updates were purged.
	27.11.14 5:24:31 GMT+06:00	Distribution	informational	admin	Distribution request 3060 started by admin has completed.
	27.11.14 5:24:31 GMT+06:00	Distribution	informational	admin	Distribution request 3060 started by admin completed successfully on 2 out of 2 location(s).
	27.11.14 5:11:02 GMT+06:00	Distribution	informational	admin	Started distribution of content for request id 3060 started by admin.
	27.11.14 5:02:00 GMT+06:00	Schedule	informational	admin	Distribution schedule Distribute started.
	27.11.14 3:10:47 GMT+06:00	Download	critical	admin	Download request 3059 started by admin has failed.
	27.11.14 2:50:51 GMT+06:00	Download	critical	admin	Download job from source server Symantec LiveUpdate has failed. There were 2 updates that failed to download.
	27.11.14 2:50:51 GMT+06:00	Download	critical	admin	Failed to download file 1417029247jtun_nav2k8en141119003.m25 while processing request id 3059.
	27.11.14 2:50:36 GMT+06:00	Download	critical	admin	Failed to download file 1417029247jtun_nav2k8en141119003.m25 while processing request id 3059.
	27.11.14 2:48:57 GMT+06:00	Download	informational	admin	Started download of content for request id 3059 started by user admin.
	27.11.14 2:04:15 GMT+06:00	Schedule	informational	admin	Download schedule Update started.
	27.11.14 0:44:33 GMT+06:00	Distribution Center Cleanup	informational	LUA Startup	Successfully purged old contents on server Default Production Distribution Center. Total of 85 updates were purged.
	27.11.14 0:44:33 GMT+06:00	Distribution Center Cleanup	informational	LUA Startup	Successfully purged old contents on server Default Testing Distribution Center. Total of 85 updates were purged.

I'm sorry please post the log.liveupdate from SEPM, this will show up why your SEPM is not able to download from your Internal Luadmin

Try below article

Corrupt definitions prevent Endpoint Protection clients from receiving updates

Article:TECH166923

|

Created: 2011-08-10

|

Updated: 2014-11-20

|

Article URL http://www.symantec.com/docs/TECH166923

Not help(((

Where i can take log file for post here?

Windows Server 2003: C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate.

Windows Server 2008: C:\ProgramData\Symantec\LiveUpdate.

the file name is log.liveupdate ( do a search if thats in the places mentioned above)

That is it.

Sir,

Your SEPM is not getting update from Liveupdate administrator, 

its trying to reach

lilveupdate.symantec.com (using internet)

rogress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.100.15_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"

  CSendHTTPRequest::SendRequest - Unhandled WinInet Error occurred: err=  12031; desc = The connection with the server was reset

Your firewall is blocking the request.

Are you able to open this URL?

http://www.symantec.com/business/support/index?page=content&id=TECH102059

Please check with your network team.

you can open the log.liveupdate in a notepad. You can see the proxy IP and URL its trying to access, check if those are correct

Yes, i download file and open it.

it means that you are able to open that URL from your account

however SEPM is not able to open that URL using SYSTEM account

Check this document to see if System account is working fine

How to verify SYSTEM account proxy settings on Windows XP

http://www.symantec.com/business/support/index?page=content&id=TECH146632

on windows 7 or 2008, you should use psexec.exe and open Internet explorer, check the proxy settings

http://blogs.technet.com/b/askds/archive/2008/10/22/getting-a-cmd-prompt-as-system-in-windows-vista-and-windows-server-2008.aspx

I update SEP till last version 12.1.5 and this not help F...

Try to update SEPM through .jdb file

 

Download .jdb files to update definitions for Endpoint Protection Manager

Article:TECH102607

|

Created: 2007-01-08

|

Updated: 2014-11-20

|

Article URL http://www.symantec.com/docs/TECH102607

It isn't possible to explain it. Updating doesn't work, but some the client are updated - as it is possible???

how many client are updated ?

 

10 of 120, but SEP not download update 28 Ноябрь 2014 г. 18:56:15 ALMT:  LiveUpdate failed.

May be that system update direct internet.

See this article

LiveUpdate fails on the Symantec Endpoint Protection Manager with errors in Log.LiveUpdate similar to "LiveUpdate couldn't expand replacement path [spcIronWl-incr-InstallDir]."

http://www.symantec.com/business/support/index?page=content&id=TECH201511

Not direct. We use for update local liveupdate

And client go to update on this local liveupfate srerver

From the log its evident that its going to internet.. Please check the live update settings SEPM Under admin Servers tab

live update settings -where on SEP or on local liveupdate server?

On internet go only  local liveupdate serve

Clients go to  local liveupdate serve and we saw thats no update 

On sepm Your client might be getting update from lu admin.. But your sepm is getting update from internet

Big to you thanks.

Problem is Windows Authentication and your link http://www.symantec.com/business/support/index?page=content&id=TECH201511 help us. 

 

Happy to help :)