Protection Engine for Cloud Services

I'm experiencing an issue with intermittent LiveUpdate failures on a clean install of SPE 7.5.0.34

This is a clean install on a 2008 R2 server.  No proxy servers, firewall is letting the traffic through clear.  Sometimes it does update successfuly but we usually see 2 -3 failures a day with LiveUpdate checking every 2 hours.

If I manually go in and run the LiveUpdate it is always successful or comes back "Up To Date"

[Session Parameters - BEGIN]
03:43:23.932734  Working Path: C:\Program Files (x86)\Symantec\Scan Engine\definitions\AntiVirus
03:43:23.932734  Product ID: {x}
03:43:23.932734  Monikers:
03:43:23.932734   {x}
03:43:23.932734  HST Path: Not Set
03:43:23.932734  Ignore HST Errors: Not Set
03:43:23.932734  Custom Download Path: Not Set
03:43:23.932734  Check For Updates Only: Not Set
03:43:23.932734  Servers:
03:43:23.932734   Server 0:
03:43:23.932734    Protocol: HTTP
03:43:23.932734    Hostname: liveupdate.symantec.com
03:43:23.932734    Port: 80
03:43:23.932734    Path:
03:43:23.932734  Proxies:
03:43:23.932734   Empty
03:43:23.932734  Progress Callback:
03:43:23.932734   Yes
03:43:23.932734 [Session Parameters - END]
03:43:23.932734 [Component List - START]
03:43:23.932734  {x} : SPE 7.5 AV Definitions for x86-windows : SPE 7.5 AV Definitions for x86-windows_MicroDefsB.CurDefs_SymAllLanguages
03:43:23.932734 [Component List - END]
03:43:23.932734 [Session Initialization - START]
03:43:23.932734  Result code: 0x00010000
03:43:23.932734  Component Status Changes:
03:43:23.932734   None
03:43:23.932734 [Session Initialization - END]
03:43:23.932734 [Inventory Synchronization - BEGIN]
03:43:26.026497  Result Code: 0x00010000
03:43:26.026497  Result Message: OK
03:43:26.026497  Component Status Changes:
03:43:26.026497   None
03:43:26.026497 [Inventory Synchronization - END]
03:43:26.026497 [Server Selection - START]
03:43:26.182748  Result Code: 0x00010000
03:43:26.182748  Result Message: OK
03:43:26.182748  [Server - START]
03:43:26.182748   Host ID: {x}
03:43:26.182748   Status Code: 2
03:43:26.182748   Status Message: Server was selected
03:43:26.182748   Protocol: HTTP
03:43:26.182748   Hostname: liveupdate.symantec.com
03:43:26.182748   Port: 80
03:43:26.182748   Path:
03:43:26.182748   Proxy ID: {00000000-0000-0000-0000-000000000000}
03:43:26.182748   Proxy Bypass: true
03:43:26.182748  [Server - END]
03:43:26.182748  Used proxy list was empty
03:43:26.182748 [Server Selection - END]
03:43:26.198374 [Check for Updates - START]
03:43:26.464000  Result Code: 0x00010000
03:43:26.464000  Result Message: OK
03:43:26.464000  Component Status Changes:
03:43:26.464000   None
03:43:26.464000  [Component - START]
03:43:26.464000   Component ID: {x}
03:43:26.464000   Available Updates: 1
03:43:26.464000   [Package - START]
03:43:26.464000    Item: Virus Definitions
03:43:26.464000    Description: Norton AntiVirus Definitions
03:43:26.464000    File: 1397107610jtun_csapix86en140409023.m35
03:43:26.464000    Sequence Name: CurDefs
03:43:26.464000    Sequence Number: 140409035
03:43:26.464000   [Package - END]
03:43:26.464000  [Component - END]
03:43:26.464000 [Check for Updates - END]
03:43:26.464000 [Package Download - START]
03:43:26.464000  Component: {x}
03:43:26.464000  File: 1397107610jtun_csapix86en140409023.m35
03:43:26.964003  Result Code: 0x00010000
03:43:26.964003  Result Message: OK
03:43:26.964003 [Package Download - END]
03:43:26.964003 [Package Decompression - START]
03:43:26.964003  Component: {x}
03:43:26.964003  File: 1397107610jtun_csapix86en140409023.m35
03:43:26.995254  Result Code: 0x00010000
03:43:27.010879  Result Message: OK
03:43:27.010879 [Package Decompression - END]
03:43:27.010879 [Initialize Package Installs - START]
03:43:27.010879  Result Code: 0x00010000
03:43:27.010879  Result Message: OK
03:43:27.010879  Component Status Changes:
03:43:27.010879   None
03:43:27.010879 [Initialize Package Installs - END]
03:43:27.010879 [Package Install - START]
03:43:27.010879  Component: {x}
03:43:27.010879  File: 1397107610jtun_csapix86en140409023.m35
03:43:27.010879  Action Item: CSWin.dis
03:43:27.010879  Result Code: 0x00010000
03:43:27.010879  Result Message: OK
03:43:27.010879 [Package Install - END]
03:43:27.010879 [Finalize Pacakge Installs - START]
03:43:29.104642  Result Code: 0x00010000
03:43:29.104642  Result Message: OK
03:43:29.104642  Component Status Changes:
03:43:29.104642   None
03:43:29.104642 [Finalize Pacakge Installs - END]
03:43:29.104642 [Finalize Session - START]
03:43:29.104642  Result Code: 0x00010000
03:43:29.104642  Result Message: OK
03:43:29.104642  Component Status Changes:
03:43:29.104642   None
03:43:29.104642 [Finalize Session - END]
03:43:29.104642 [Session Results - START]
03:43:29.104642  Session Result Code: 0x00010000
03:43:29.104642  Session Result Message: OK
03:43:29.104642  [Component Result - START]
03:43:29.104642   Component ID: {x}
03:43:29.104642   Display Name: SPE 7.5 AV Definitions for x86-windows
03:43:29.104642   PVL: SPE 7.5 AV Definitions for x86-windows_MicroDefsB.CurDefs_SymAllLanguages
03:43:29.104642   Result Code: 0x00010000
03:43:29.104642   Result Message: OK
03:43:29.104642   [Package Result - START]
03:43:29.104642    File: 1397107610jtun_csapix86en140409023.m35
03:43:29.104642    Result Code: 0x80012000
03:43:29.104642    Result Message: UNKNOWN
03:43:29.104642   [Package Result - END]
03:43:29.104642  [Component Result - END]
03:43:29.104642 [Session Results - END]
03:43:29.104642 [Session Summary - START]
03:43:29.104642  Components: 1
03:43:29.120267  Packages:   1
03:43:29.120267  Success:    0
03:43:29.120267  Fail:       1
03:43:29.120267 [Session Summary - END]

We are experiencing the exact same issue at a customer system. Anyone got a solution for this yet?

Thanks!

Hello

Same issue :(

Regards

I opened a case at Symantec Technical Support. I will let you know about the outcome.

I have a case open with support, many traces and logs have been captured and sent over during the failure.  Just waiting for a resolution now.

Seems like a very common issue.  Bit of a shame.  I will hold off updating or using this version for customers until its patched.  If any of you guys gets to the bottom of the issue, it would be great if you could update this thread.

Hello

Published article regarding this issue

http://www.symantec.com/docs/TECH217345

Regards

Received feedback from support.  Looking to be more and more like a backend issue on Symantecs part.

We have the same issue here on our 7.5 installations. It might not happen several times a day but it happens more often than it should.

We also have a huge issue with scanning .XLSX files. It takes way too much time on those.