Endpoint Protection

The liveupdate fails on a windows 2003 sp2 32 bit vmware server with Management console installed. .  I have gone thru all of the steps previously with symantec tech of deleting possibly corrupt files and updating the catalog.

Since the unresolved support call with symantec. I have rebuilt another server from scratch just installed the client and the updates work fine running the luall.exe command and thru the client interface. After installing the management console liveupdate fails again..

check the dcom settings and your firewall
coz when you run the luall.exe its running from your account and it acutally has access.

"Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager 

http://service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/3b09d4f329acc39fc12573b400341977?OpenDocument

Symantec Endpoint Protection Manager (SEPM) reports error "LiveUpdate finish with Return code = 4" and LU error 1875, 1845, 1853, 1806 are present in Log.LiveUpdate.

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/4f99fce9e58700858025751600347124?OpenDocument&Click=

   How to troubleshoot   "Error: LiveUpdate encountered one or more errors. Return code = 4" in LiveUpdate status in Symantec Endpoint Protection Manager

---->Check for proxy in the network

----> Windows  Enhanced Security in Internet Explorer should be disabled

---->Uninstall Liveupdate

---->Delete C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate Liveupdate folder

---->Reinstall LiveUpdate

---->Register Liveupdate to SEPM

      Open the  command prompt browsed  to:

      C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin

               Type lucatalog –cleanup press enter

            Then type  lucatalog –update  press enter

---->Run  Liveupdate from SEPM..

Thanks,

I have checked the dcom setting and the registry.  I have alo ran all of the steps above with the symantec tech and it is still failing

When was the last time it was working ? Or has this never ran?

Do you have any proxy in your network?

Check the proxy settings in IE.. 

    Does it fail straight away or in the middle?

Error LU1835 halfway through after installing the SEPM generally indicates that you have some security features on a proxy / firewall, or advanced caching on the proxy / firewall which holds on to some content or block some content and thus liveupdate cannot complete.

To fix this you need to exclude  symantec domains ( symantecliveupdate.com / akamai  / symantec.com ) on your firewall checks on port 80.
You could also create an exclusion for the local IP of your SEPM depending on the firewall / proxy.

Let me know if this helps.

The Endpoint protection was woking up to January 15th 2010. The liveupdates just started failing. We do not use a proxy server. I am not using enhanced mode with IE.  
 We are using an esafe firewall,  After the liveupdate starting failing, I added symantec to the excluison list , but still does not reslove issue.

check if your firewall is blocking it

How to determine whether your firewall is blocking LiveUpdate

http://service1.symantec.com/SUPPORT/sharedtech.nsf/d3c44a1678bd8f45852566aa005902cb/c0aeb869920b38b688256d980074e389?OpenDocument&prod=Symantec%20AntiVirus%20Corporate%20Edition&ver=10.0&src=ent&pcode=sav_ce&dtype=corp&svy=&prev=&miniver=sav_ce_10 

Try this first

http://service1.symantec.com/SUPPORT/sharedtech.nsf/docid/2003090514252213 ">How to determine whether your firewall is blocking LiveUpdate

http://service1.symantec.com/SUPPORT/sharedtech.nsf/docid/2003090514252213

   How to determine whether your firewall is blocking LiveUpdate

It fails toward the end. If I unsinstall the Endpoint protection management consolse liveupdate will work. It is just after the install of the mangement consolse it fails.


The following Symantec products and components are installed on your computer.
> Antivirus and antispyware definitions
> Antivirus and antispyware definitions Win32 11.0 Hub
> Antivirus and antispyware definitions Win32 11.0 MicroDefsB.CurDefs
> Antivirus and antispyware definitions Win64 11.0 Hub
> Antivirus and antispyware definitions Win64 11.0 MicroDefsB.CurDefs
> Decomposer Win32 and Win64 11.0
> Intrusion Prevention signatures
> Intrusion Prevention signatures Win32 11.0
> Intrusion Prevention signatures Win64 11.0
> LiveUpdate
> Submission Control signatures
> Submission Control signatures 11.0
> Symantec Endpoint Protection Manager Content Catalog 11.0
> Symantec Endpoint Protection Win32 11.0.0 (English)
> Symantec Endpoint Protection Win32 11.0.1000 (English)
> Symantec Endpoint Protection Win32 11.0.2000 (English)
> Symantec Endpoint Protection Win32 11.0.3001.2224 (English)
> Symantec Endpoint Protection Win32 11.0.4000.2295 (English)
> Symantec Endpoint Protection Win32 11.0.5002.333 (English)
> Symantec Endpoint Protection Win64 11.0.0 (English)
> Symantec Endpoint Protection Win64 11.0.1000 (English)
> Symantec Endpoint Protection Win64 11.0.2000 (English)
> Symantec Endpoint Protection Win64 11.0.3001.2224 (English)
> Symantec Endpoint Protection Win64 11.0.4000.2295 (English)
> Symantec Endpoint Protection Win64 11.0.5002.333 (English)
> Symantec Endpoint Protection client
> Symantec Network Access Control Win32 11.0.0 (English)
> Symantec Network Access Control Win32 11.0.1000 (English)
> Symantec Network Access Control Win32 11.0.2000 (English)
> Symantec Network Access Control Win32 11.0.3001.2224 (English)
> Symantec Network Access Control Win32 11.0.4000.2295 (English)
> Symantec Network Access Control Win64 11.0.0 (English)
> Symantec Network Access Control Win64 11.0.1000 (English)
> Symantec Network Access Control Win64 11.0.2000 (English)
> Symantec Network Access Control Win64 11.0.3001.2224 (English)
> Symantec Network Access Control Win64 11.0.4000.2295 (English)
> Symantec Security Software
> Symantec Security Software Update
> Symantec Shared Components
> TruScan proactive threat scan commercial application engine 11.0
> TruScan proactive threat scan commercial application list Win32 11.0
> TruScan proactive threat scan commercial application list Win64 11.0
> TruScan proactive threat scan data 11.0
> TruScan proactive threat scan engine Win32 11.0
> TruScan proactive threat scan engine Win64 11.0
> TruScan proactive threat scan whitelist Win32 11.0
> TruScan proactive threat scan whitelist Win64 11.0

Initializing...
Connecting to liveupdate.symantecliveupdate.com...

Downloading catalog file (1 of 63), product up-to-date.
Downloading catalog file (2 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (3 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (4 of 63), product up-to-date.
Downloading catalog file (5 of 63), product up-to-date.
Downloading catalog file (6 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (7 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (8 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (9 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (10 of 63), product up-to-date.
Downloading catalog file (11 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (12 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (13 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (14 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (15 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (16 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (17 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (18 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (19 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (20 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (21 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (22 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (23 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (24 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (25 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (26 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (27 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (28 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (29 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (30 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (31 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (32 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (33 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (34 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (35 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (36 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (37 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (38 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (39 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (40 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (41 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (42 of 63), product up-to-date.
Downloading catalog file (43 of 63), product up-to-date.
Downloading catalog file (44 of 63), product up-to-date.
Downloading catalog file (45 of 63), product up-to-date.
Downloading catalog file (46 of 63), product up-to-date.
Downloading catalog file (47 of 63), product up-to-date.
Downloading catalog file (48 of 63), product up-to-date.
Downloading catalog file (49 of 63), product up-to-date.
Downloading catalog file (50 of 63), product up-to-date.
Downloading catalog file (51 of 63), product up-to-date.
Downloading catalog file (52 of 63), product up-to-date.
Downloading catalog file (53 of 63), product up-to-date.
Downloading catalog file (54 of 63), product up-to-date.
Downloading catalog file (55 of 63), product up-to-date.
Downloading catalog file (56 of 63), product up-to-date.
Downloading catalog file (57 of 63), product up-to-date.
Downloading catalog file (58 of 63), product up-to-date.
Downloading catalog file (59 of 63), product up-to-date.
Downloading catalog file (60 of 63), product up-to-date.
Downloading catalog file (61 of 63), product up-to-date.
Downloading catalog file (62 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list
Downloading catalog file (63 of 63), complete.
Opening update list
The digital signature found on the catalog file has been signed by Symantec Corporation.
Processing update list
Opening update list
Processing update list

The following updates have been found:
> Symantec Security Software,  908.6 KB
> Antivirus and antispyware definitions,  1724.4 KB
> Intrusion Prevention signatures,  1308.3 KB
> Symantec Endpoint Protection Manager Content Catalog 11.0,  2452.5 KB
> Antivirus and antispyware definitions Win32 11.0 MicroDefsB.CurDefs,  23436.8 KB
> Antivirus and antispyware definitions Win32 11.0 Hub,  63613.0 KB
> Antivirus and antispyware definitions Win64 11.0 MicroDefsB.CurDefs,  23348.7 KB
> Antivirus and antispyware definitions Win64 11.0 Hub,  63797.6 KB
> Decomposer Win32 and Win64 11.0,  633.1 KB
> TruScan proactive threat scan engine Win32 11.0,  1121.1 KB
> TruScan proactive threat scan engine Win64 11.0,  1268.6 KB
> TruScan proactive threat scan data 11.0,  78.4 KB
> TruScan proactive threat scan commercial application engine 11.0,  652.6 KB
> TruScan proactive threat scan whitelist Win32 11.0,  841.2 KB
> TruScan proactive threat scan whitelist Win64 11.0,  841.3 KB
> TruScan proactive threat scan commercial application list Win32 11.0,  74.1 KB
> TruScan proactive threat scan commercial application list Win64 11.0,  74.1 KB
> Intrusion Prevention signatures Win32 11.0,  1305.5 KB
> Intrusion Prevention signatures Win64 11.0,  1320.9 KB
> Submission Control signatures 11.0,  6.2 KB
Total Download 188806.9 KB

Downloading Antivirus and antispyware definitions (1 of 1), complete.
Downloading Intrusion Prevention signatures (1 of 1), complete.
Downloading Symantec Security Software (1 of 2), complete.
Downloading Symantec Security Software (2 of 2), complete.
Downloading Symantec Endpoint Protection Manager Content Catalog 11.0 (1 of 1), complete.
Downloading Antivirus and antispyware definitions Win32 11.0 MicroDefsB.CurDefs (1 of 1), complete.
Downloading Antivirus and antispyware definitions Win32 11.0 Hub (1 of 1), 80% complete...

Downloading failed, error summary...
LU1835: The LiveUpdate server failed to respond in a reasonable amount of time.  This could happen because you could not connect to the server, the server is now unavailable, or you became disconnected to the server.  Try running LiveUpdate again.

LiveUpdate session is complete.
 

I downloaded the livtri.zip file and unzipped the file

all three files were there.

open control pannel
select liveupate
select the type as interactive
start - run -type luall.exe
now try downloading few patterns at  a time, i think your internet connection is resetting here, give it a try should work.
 

Do both together reboot the server and try

How to clear corrupt Virus Definitions from SEPM

https://www-secure.symantec.com/connect/articles/how-clear-corrupt-virus-definitions-sepm

How to Uninstall and Reinstall LiveUpdate When a Symantec Endpoint Protection Manager or Symantec Endpoint Protection Client is Installed

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100907303548

 

check this too

Error: "LU1835: Connection to the LiveUpdate server failed" (Enterprise)

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/ffd996a2f082a573882571560054373d
 

Hello
 

I have tried all of the other suggestions more than once on my own and with a two different support techs. I have reinstalled liveupdate , set the time out file to an extended time deleted files for possible corruption,, etc...

How ever I did try rafeeq suggestion of enabling interactive...   I just selected the first four downloads an it failed. I went back and just tried the first down load item and that succeeded.   I will keep try others to see which one it fails on..    ( What is this telling us?  Is the firewall doing any blocking or is it just timing out?

 

 

 

internet timing out, we shall increase the timeout time.
 

How to configure the time-out value for HTTP downloads in LiveUpdate

http://service1.symantec.com/SUPPORT/sharedtech.nsf/docid/2004081310440013?Open&docid=2006042008195848&nsf=ent-security.nsf&view=854fa02b4f5013678825731a007d06af 

put a higher value for

Hello

I excluded the Antivirus and Antispyware  Win64 11.0 hub download, and all of the updates installed successfully.  Any ideas why it is failing on just this update?

 

Hi I had previously increased the time out value,, and this did not resolve it.

might be because of size, do u have any content filtering in firewall?
try bypassing firewall and download updates. 

Hello

I have bypassed the firewall and the updates are working..  Thanks for you help, I am allot closer then I have been. Would you know what to allow or tweak under content. We are using esafe for the firewall

 I have been trying to look through the eSafe forums to see if anyone else is having a similar issue, but there forums contain no search features and was somewhat hard to navigate so I wasn't able to find anything. You can try yourself if you would like http://www.aladdin.com/forum/. 


Also I know this was posted before, but I just wanted to double check that you were indeed opening the correct ports on the eSafe firewall?

How to determine whether your firewall is blocking LiveUpdate

http://service1.symantec.com/SUPPORT/sharedtech.nsf/d3c44a1678bd8f45852566aa005902cb/c0aeb869920b38b688256d980074e389?OpenDocument&prod=Symantec%20AntiVirus%20Corporate%20Edition&ver=10.0&src=ent&pcode=sav_ce&dtype=corp&svy=&prev=&miniver=sav_ce_10 

Thanks,
Grant

Hello

It is now working. Esafe was blocking the traffic . I excluded the IP address of  my server that has the management console in esafe under protocols and then under lists\VIP servers

well mentioned earlier firewall was blocking ;) happy that its working now...