Endpoint Protection

I am running SEPM 12.1 RU1 on a Windows 2008 R2 SP2 server. I installed SEP 11.0.7 client on some specific servers and receive continuous System Event Log - Event ID: 7036 messages every 5 minutes. The messages are related to LiveUpdate starting and stopping.

How frequently clients are configured for checking updates?

Daily at 5pm

can you post the liveupdate event id description?are the clients supposed to get the updates from SYmantec liveupdate?

The LiveUpdate service entered the stopped state.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Then

The LiveUpdate service was successfully sent a start control.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Yes we have it set to use the default Symantec LiveUpdate server.

I'm seing this too.  Is there a resolution?

Hi ,

Please add the log.liveupdate ...

I can check it and let you know the issue...

Hi ,

IF possible uninstal the client and reinstall  the client .

Check after resinstallation ...

Every 5 mins is  300 Secs. The heart beat interval where the communication happens between the SEP and the SEPM( if I am not worng with the default heart beat interval). However this Event id is not an error, it's just logging that a communication event has happened.

Please look at the below link from Microsoft :)

http://technet.microsoft.com/en-us/library/cc756308(v=ws.10).aspx