When I look at the http logs on my web proxy, I'm seeing a few systems with random user agents going to live update and one system with the user-agent of "Symantec Liveupdate" and another "Liveupdate".
Ignoring that these systems should be going directly to SEPM based on location policy, I"m wondering why liveupdate on some systems is using a random user agent. Is there any way for me to configure it so the user agent is consistent. Its making it difficult to look for anomolous user agents when 80% of the user agents are random and going to a symantec liveupdate site.