Endpoint Protection

Hi all,

I'm hoping that someone can help me with this.

On our original Installation of SEP 11 MR3, we had the liveupdate administrator installed on the same box as SEPM. The liveupdate version was old - I cannot check the version as the the liveupdate administrator will not start anymore. All services are running etc.

I've built a new Liveupdate Administrator server and changed the liveupdate policy in SEPM to tell the clients to look at it for def updates. During the LUA install I specified a different drive for the update downloads, namely E:\Liveupdate\Downloads.

Now if I try to do a manual def update from a client, it finds the new server and I get the following:

The following Symantec products and components are installed on your computer.
> Antivirus and antispyware definitions
> Intrusion Prevention signatures
> LiveUpdate
> Submission Control signatures
> Symantec Security Software
> Symantec Security Software Update
> Symantec Shared Components

Initializing...
Connecting to <Our New LiveUpdate Server...>
Downloading catalog file (1 of 13), product up-to-date.
Downloading catalog file (2 of 13), product up-to-date.
Downloading catalog file (3 of 13), product up-to-date.
Downloading catalog file (4 of 13), product up-to-date.
Downloading catalog file (5 of 13), product up-to-date.
Downloading catalog file (6 of 13), product up-to-date.
Downloading catalog file (7 of 13), product up-to-date.
Downloading catalog file (8 of 13), product up-to-date.
Downloading catalog file (9 of 13), product up-to-date.
Downloading catalog file (10 of 13), product up-to-date.
Downloading catalog file (11 of 13), product up-to-date.
Downloading catalog file (12 of 13), product up-to-date.
Downloading catalog file (13 of 13), product up-to-date.
All of the Symantec products installed on your computer are currently up-to-date. Remember to check for new updates frequently.

The problem is that the defs do not update and have not done since the new LUA server went live. I can see that  the new defs are in E:\Liveupdate\downloads on the server but if I go to http://OurNewLiveupdateServer:7070/clu-prod I can only see one minitri.flg file there and is dated from when the server went live. I'm assuming that there should be lots of def files in this folder. BTW The URL points to the default location C:\Program Files\Symantec\LiveUpdate Administrator\clu-prod

My question is. how can I get the clients to download the new defs. Symantec support suggested uninstalling and reinstalling LUA but I don't want to do this as it wlll mean having to reconfigure everything again.

Any help with this would be greatly appreciated as I'm getting worried about the client definitions being out of date.

Thanks

Paul

is this default configuration, or have you changed the settings.

Well if it is default one, the product /definition download will be in the location c:\docs and settings\all user\application data\symantec\LUA\downloads.

THen the system sneeds to distribute the definitions to C:\Program Files\Symantec\LiveUpdate Administrator\clu-prod (if selected production) or else clu-test ( if selected testing). To push the definition to clu-prod, you need to have Distribution enabled . You can set distribution by click on " download and ditribute tab" and add distribution. Also ensure that the the system ( LUA ) downloads SEP definition.

I have read somewhere that SEPM and LUA should not be on same box.

Pete!

Thank you - I owe you beers. I was being a dipstick. I had created about ten distribution schedules to to go to various satellite offices but had not created the default schedule to move the defs to the clu-prod folder on the default server itself. I have done this now and it is working perfectly.

Thank you again

Paul