Endpoint Protection

Hello Experts!

I had sucessfully deployed an internal Liveupdate server for some of our clients. I won't go into details but this is the only we these clients can get updates.

They were happily downloading their updates form the server until about a month ago. Now they have all stopped downloading any updates and are stuck on the 12th of January definiations.

The live update server is downloading twice a day and is sucessfull every time. The distribution job is also sucessful. I can browse to the internal update website without issues.

Can anyone help with where I should look next?

In event log of LUA any error?
Try by clearing the defs in the LUA once and try. 

Where do I find the logs and how do I clear the definitions?

Thanks

Login to LUA  you will get a tab as event log (I am believing your LUA is 2.x.x.x)
 
For clearing the defs just move the file from the download and distribution folders

I checked the event log and it seems that downloads are occuring correctly as well as distributions.

So to clear definition files i just delete the contents of the temporary download  directory as well as the distribution center folder?

After this should i perform any other actions?

After that do a reconfiguration according to below doc
Downloading and hosting the Symantec Endpoint Protection Manager (SEPM) 2010 definitions patch via LiveUpdate Administrator 2.x (LUA 2.x) and LiveUpdate Administration Utility 1.x (LUAU 1.x) 

Ok.

I deleted all files from the distribution folder manually and followed the instructiosn on that document. I was running an older version of LU so I've updated to 2.2.2.x now.

I'm concerned that the files I deleted are still registered in the database. Can anyone confirm if this will be the case or not?

Incidentally, when i try any navigation through the LU web interface its all very slow. This has only recently happened and its still slow after the upgrade to the latest version.

Any ideas?

Hi Aeropars,

First off: make sure you have correctly implemented the suggestions from this article: LiveUpdate Administrator 2.2 Performance Tuning  That is very important to make sure that LUA 2.x is running well for you.

Second: the place where you are probably best off looking for clues is in the log.liveupdate file fo the clients that cannot download their updates.  From what you have described, it seems like LUA 2.x is correctly downloading and distributing the contents.  The logs from the clients can reveal what is happening when they try to go to LUA's distribution center to collect it.  Are they not able to connect-?  Are they able to download, but not to process the updates-?  Are they looking for the wrong files?

If possible, collect the logs from several affected clients and then paste into this forum post just the bottom where the messages say "success" or "failure" and how many updates were found and applied.

Thanks and best regards,

Mick

Thanks for the reply.

The message at the end of the log file is as follows:

3/2/2010, 7:03:39 GMT -> EVENT - SESSION END FAILED EVENT - The LiveUpdate session ran in Silent Mode. LiveUpdate found 2 updates available, of which 0 were installed and 2 failed to install.  The LiveUpdate session exited with a return code of 1806, LiveUpdate downloaded all of the updates you requested, but was unable to install any of them.
3/2/2010, 7:03:39 GMT -> The callback proxy executable for product {C60DC234-65F9-4674-94AE-62158EFCA433} is exiting with no errors
3/2/2010, 7:03:39 GMT -> ***********************           End of LU Session           ***********************
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer


so it did find 2 updates but didnt install them. If i change my client settings to use the LU server i get the same error that it downloaded but failed to install them.

Any ideas?

Any firewall/proxy is present between client and LUA? If yes try by by passing them...

No, no firewall or proxy between them and the internal LU server. As you can see fomr the log it is downloading but not installing.

Whether the update available in LUA and SEPM are same? Just for testing reinstall SEP in one client point it to LUA for downloading the updates and see same error you are getting or not.

Ok i added a brand new client to the SEPM and used the liveupdate server and this didnt update again. I have newer defintiones but thats because the client package was built after this problem occurred so the definitioned bundled with it is newer than when the fault occured. this however, like I say, is still not updating even when i start a manual download.

I've kind of given up and am reinstalling live update administrator.