Hi !

When I start  LiveUpdate   on main menu  Symantec Endpoint Protection Small Business Edition 12.1.2015.2015,

on server computer  I get :

LiveUpdate failed . [Server: Srv]

Help please .

This happens when you run manually or via the schedule that you've set? What happens if it runs automatically?

You can try re-installing LU

LiveUpdate fails immediately when run from the Symantec Endpoint Protection Manager console.

can you post the liveupdate logs?

post the log.liveupdate from the SEPM server.

"Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager

14 май 2013г.16:56:42 VLAT:LiveUpdate failed.[ Server: srv]

14 май 2013г.16:56:42 LUALL.EXE finished running.[ Server: srv]

14 май 2013г.16:56:42 VLAT:LiveUpdate encountered one or more errors. Returncode= 4.[ Server: srv]

14 май 2013г.16:56:41 VLAT:LUALL.EXE has been launched.[ Server: srv]

14 май 2013г.16:56:40 VLAT:Download started.[ Server: srv]

hello,

are you using any proxy?

Check mithun Comments

https://www-secure.symantec.com/connect/forums/sepm-v-121-ru1-liveupdate-return-error-code-4-live-updating#comment-7562601

https://www-secure.symantec.com/connect/forums/scheduled-live-update-fails-return-code-4

return code error 4, check this link to fix the issue

http://www.symantec.com/business/support/index?page=content&id=TECH103112

Check my above attach link, may be it fix your issue. 

Hello,

LiveUpdate encountered one or more errors Return code = 4 is a Generic Error.

• Are you using any proxy?
• Is the SEPM server machine connected to internet?
• Are you able to browse the below websites:

http://liveupdate.symantecliveupdate.com
http://liveupdate.symantec.com
ftp://update.symantec.com/opt/content/onramp

• Try Restarting the SEPM server machine?
• Did you try disabling the Windows Firewall on the machine and checked ?
• Also, When uninstalling and reinstalling LiveUpdate, are you using the correct client for SEP 12.1?  http://www.symantec.com/business/support/index?page=content&id=TECH171060

• Make sure you are using Liveupdate version 3.3.1.23- nothing earlier!

Windows LiveUpdate Client for Use with Symantec Endpoint Protection Manager 12.1

http://www.symantec.com/docs/TECH181305

• Also, check the Proxy settings in SEPM 12.1 if they are correct?

How to Update the Proxy settings in the Symantec Endpoint Protection Manager (SEPM) 12.1

https://www-secure.symantec.com/connect/articles/how-configure-proxy-settings-symantec-endpoint-protection-manager-sepm-121

For further Troubleshooting, Could you please upload the log.liveupdate?

Log.liveupdate is located in :

Windows 2003: C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate

Windows 2008: C:\ProgramData\Symantec\LiveUpdate

That would help us understand the root cause of the issue.

Hope that helps!!

Hi ,

I see my Log.LiveUpdate.

Date my Log.LiveUpdate is 11.02.2012

Last record in log  with date : 2/11/2013,

2/11/2013, 17:02:04 GMT -> EVENT - PRODUCT UPDATE SUCCEEDED EVENT - Update available for SEPM Iron Whitelist 12.1 RU2 - MicroDefsB.CurDefs - SymAllLanguages. Update for CurDefs takes product from update 130208004 to 130211004. Server name - liveupdate.symantecliveupdate.com, Update file - 1360589274jtun_iron2012_130208004.irn, Signer - cn=Symantec Corporation,ou=Locality - Culver City,ou=Product Group - LiveUpdate,ou=SymSignature 2005,o=Symantec Corporation, package install code 0. The Update executed with a result code of 1800, => ???????
2/11/2013, 17:02:04 GMT -> EVENT - PRODUCT UPDATE SUCCEEDED EVENT - Update available for SEPM Iron Revocation List 12.1 RU2 - MicroDefsB.CurDefs - SymAllLanguages. Update for CurDefs takes product from update 130211004 to 130211008. Server name - liveupdate.symantecliveupdate.com, Update file - 1360598141jtun_irev130211004.7z, Signer - cn=Symantec Corporation,ou=Locality - Culver City,ou=Product Group - LiveUpdate,ou=SymSignature 2005,o=Symantec Corporation, package install code 0. The Update executed with a result code of 1800, => ???????
2/11/2013, 17:02:04 GMT -> EVENT - SESSION END SUCCESSFUL EVENT - The LiveUpdate session ran in Silent Mode. LiveUpdate found 12 updates available, of which 12 were installed and 0 failed to install.  The LiveUpdate session exited with a return code of 1800, ???????
2/11/2013, 17:02:05 GMT -> IE8 support.
2/11/2013, 17:02:05 GMT -> The callback proxy executable for product {E031872C-0AB4-F6D4-0039-BF122A32714F} is exiting with no errors
2/11/2013, 17:02:06 GMT -> ***********************           End of LU Session           ***********************
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
 

It seems that something is not working.
What else to try?


I have been working without a proxy.
Brendmauer open.
Internet protocol works.
Download sites open well.

When I do:

Symantec Endpoint Protection 12.1

1. Open a command window, then browse to:
   C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin
2. Type lucatalog -cleanup and press Enter.
3. Type lucatalog -forcedupdate and press Enter.
4. Run LiveUpdate to verify that there are no errors.

After this procedure, the error  =4  still remains:

Hi,

Have you tried to reinstall liveupdate?

Reinstall liveupdate and re-register with the Symantec Endpoint Protection Manager (SEPM).

This error can be caused for different reasons including, but not limited to, the following:

1. Internet access is being blocked by a proxy server. (Please see the Technical Information section of this document for steps to configure Liveupdate for use with a proxy)
2. Symantec Endpoint Protection Manager is trying to connect to an internal LiveUpdate server and the URL supplied to LiveUpdate is not correct.
3. Enhanced Security is enabled in Internet Explorer (Please see the Technical Information section of this document for steps to disable IE Enhanced Security)
4. A firewall that requires authentication to get to the internet is used.
5. The Symantec Endpoint Protection Manager is no longer registered with LiveUpdate.
6. A Web filtering device detects and blocks certain items.

Reference: Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH103112

Hello,

Could you please Restart the Server machine and then run a Repair of Symantec Endpoint Protection Manager from Add/Remove Programs.

In case you are either running the Windows 2008 / Windows 7 / Windows 8, I would request you to Turn off / disable the Windows Defender and User Account Control (UAC) and restart the machine again.

Hope that helps!!

Hi .

I reinstall LiveUpdate.

All is OK.

Thanks all for HELP.

Hi,

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.

Where mark it ?

Hi,

You can mark any of the above comment as a solved which you think helped to resolve the issue.