I have 2 SEPM server and i want to run live update on both but due to security issue i didn't take one of my server on internet so can i copy liveupdate folder of another SEPM server to which i run liveupdate?
No, doesn't work. You can update (as written above) with .jdb files, but these files only update antivirus and antispyware files (not IPS, PTP, HI templates ...)
If I understand you correctly, you have the following situation:
- One SEPM does not have internet connection for security reasons.
- Another SEPM has internet connection.
- Both SEPMs need the same content (especially SNAC)
Use a LUA server for updating the SEPM which has not Internet connection. A LUA (LiveUpdate Administrator) mirrors a Symantec LU server. So you get the complete content stuff, not only AV/AS signatures. See this article:
Updating downloads in an internal LiveUpdate Administrator 2.x Server using the downloads from an external LiveUpdate Server: http://www.symantec.com/docs/TECH106254
But from where i get that updated policy from the updated SEPM server becuse i hav'nt made any policy for live update i only sign in the SEPM console and from the right top click live update.
Host Integrity doesn't need much update from Symantec. The HI templates, for examples, are not being updated regularly as far as I know.
Probably you want to transfer a HI policy from one SEPM to the other. Then you can follow this KB article (valid for all policies):
Exporting and importing policies: http://www.symantec.com/docs/HOWTO55193