Endpoint Protection

Hi,

We have SEP11 install packages already created for certain containers we want machines to be part of. Is it possible to have either a package or a policy to disable / delay LiveUpdate after SEP11 client has just installed? it's for system integration, LiveUpdate is preventing MDT Task Sequencer. To conclude, I need to deploy some client package that does not check for updates automatically.

Thanks,

Mitacus

this documents should help you out

Post-install LiveUpdate and Reboot information for Symantec Endpoint Protection

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/cf8f76435a977daf882575230064c4fe?OpenDocument

when you export the package , uncheck the  option for single exe, this will create a msi installation, once that is created you can follow the below document to disable LU after the installaing with MSI commands.

MSI command line reference for Symantec Endpoint Protection 11.0

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007101610183248

Install properties
RUNLIVEUPDATE= (1 = run LiveUpdate after install, 0 = do not run LiveUpdate after install, default = 1 run LiveUpdate after install)


please let me know if you have any questions.

Thanks Rafeeq for the info. I deployed one package in interactive mode, unchecked the Run LiveUpdate, I noticed there did not start any of the liveupdate processes (luall.exe, lucom.exe etc), and yet after about 15 mins, I got my client updated to current AV definitions on site. :( I guess Symantec has a natural desire for updates, which is most of the time very good, I'd say.....

I'm going to test now the msi installer option with the command line and proper switches.

Thanks,

Mitacus

after the installation when luall.exe runs it connects to symantec.com ( internet)
once its istalled it wil take the update from the manager

I guess there is no easy way to prevent it from initializing the liveupdate process- tried the command line with runliveupdate=0 switch, no internet. Not long after install, SEP pulled updates from SEPM.

Thanks for your time,

Mitacus

there is no schedule for liveudpate so that you can post pone it.
when client is installed it would connect to the manager check for updates and then download it
if you stop manager service for some time..liveupdate process would not run...give a test try.