Endpoint Protection

I'm trying to figure out whether LiveUpdate Administrator makes sense to deploy.  On the surface, I can't see any benefit.  Within SEPM, I see there are tweaks to allow for installing client patches via LiveUpdate, but this isn't working.  Would LiveUpdate administrator allow for pushing client patches to managed clients or am I still up against using other tools for getting them deployed?  With nearly 2k clients, I have about 20 different builds represented and am trying to get them all updated to the latest build.  Assigning Install Packages for each of my groups has about a 50% success rate, so I more heavily rely on client patches.

Thanks,
Joel

See if this helps:

http://www.symantec.com/docs/TECH154896

There are other links in this article as well which should be helpful.

Hi Joel,

LiveUpdate Administrator is only for content.  It will not be able to supply product patches or builds.

Have you tried pushing the installation from the SEPM?  Does that work?

Thanks,
John

The liveupdate adminstrator (LUA) has advantages mainly if your network is almost air gapped with no internet access you allow just the LUA to go to the internet and the SEPM to pickup from the LUA server and distribute content as normal.

Or if you have linux deployments they will need an LUA to update from as they can't get deifinition updates from the SEPM. You can also setup manual live update from the clients to go to the LUA for defintion updates to reduce the load on your SEPM on a big estate but these would be used in conjuction with a GUP. 

Thanks for the replies.  John, I have mixed success with deploying upgrades from SEPM.  Part of it is administration - half our servers have an E: partition with 3rd party tools installed there, and newer builds have SEP installed in the default location on C:.  Having to research which server has SEP installed on which drive is time consuming.  It's faster to apply the client patch, as it doesn't care where the client is installed to, it simply upgrades to the newer build without having to manually determine which drive it's on.  I suppose I could create seperate groups in SEPM for each client install type.  Still, we have maintenance windows going every Thursday and Friday nights all month through Altiris, so for each of those I have to break down both which week they reboot and which drive SEP is on.  Was simply looking for a better way to get client patches pushed so that I am only paying attention to maintenance window and not all variables, which change frequently.

Thanks,
Joel

Hi Joel,

You are welcome. That makes sense. Please remember to mark a solution in the forum thread.

Thanks,

John Owens