Endpoint Protection

I install  Symantec LiveUpdate Administrator in server that connect to internet

Then Update Symantec Product Catalog then add  Content Scanning Application Programming Interface(CSAPI) 8.1 and Content Scanning Application Programming Interface(CSAPI) 8.2 and Content Scanning Application Programming Interface(CSAPI) 9.0  . what is it and why 3 item

Then in  Download & Distribute    I add  add download an add  add distribution   then run now . I  underestan until of helo this program please help me

http://www.symantec.com/business/support/index?page=content&id=TECH102701&locale=en_US

link above tells how to configure and update Liveupdate administrator.

Hi mrezap2000,

The CSAPI downloads you mention are for a Symantec mail seecurity solution.  Is that what you are trying to update? 

Which Symantec products are you using in your environment?  SEP?  SAV?

Please let the forum know and the LUA 2.x experts can provide extra advice.

Thanks and best regards,

Mick

Check this video.

You can download the video and watch it.

https://www-secure.symantec.com/connect/videos/live-update-administrator-version-2229-0

Which Symantec products are you using in your environment?  SEP?  SAV?

i use sep

Hi again,

In an all-SEP environment, LUA 2.x is usually not needed.  If it can contact the Internet, the SEPM can download and distribute updates without the need of a seperate LUA server.  Details can be found in Best Practices for LiveUpdate Administrator (LUA) 2.x (http://www.symantec.com/docs/TECH93409)

There are a couple of circumstances where LUA is needed: if the SEPM cannot reach the Internet, if there are SEP for Mac clients, i fthe one LUA server is needed to update many SEPMs, etc.

Here is a document on how to configure LUA 2.x for SEP: LiveUpdate Administrator 2.x: What product selections are needed for specific versions of Symantec Endpoint Protection? (http://www.symantec.com/docs/TECH139618) 

Please let the forum community know if there is anything else needed or if this thread can be considered "solved."

Thanks again,

Mick

i config lua and in config -client setting- i export java and  windows seting whit link my server

http://server.my domain.net:7070/clu-prod  and copy this two file in  C:\Program Files\Symantec\LiveUpdate in client pc. in pc when click live update dont update. i copy  http://server.my domain.net:7070/clu-prod in IE in client  and show way  correct

how i do??

2- i install lua in server 1 that connect to internet and download all update  . now i have server2  that not connect to internet it in a local lan and i want to copy all update file from lan internet to local lan then send to clients in local lan . i instal symantect protect manager in server2.

two lan is separator physical

how i do now

in lua wher save last update and i cat to chek it

Export the client settings host file, Settings.Hosts.LiveUpdate, used by Windows LiveUpdate clients to download updates from the Distribution Center. To generate a host file:
 

- On the Configure tab, click Client Settings, and then select the Distribution Center that you want your LiveUpdate clients to use.
- Click Export Window Settings to export the Settings.Host.LiveUpdate file.
- Copy the file to \Program Files\Symantec\LiveUpdate directory on Windows client computers.

When the LiveUpdate client next runs, it will use the host file for information on where to download updates.

Note: If you are using Symantec Endpoint Protection 11.0, you can also provide the LUA URL to managed clients via LiveUpdate policy

Run luall.exe on a Windows client- it should process the information in Settings.Hosts.LiveUpdate and start to download materials from LUA 2.x's Distribution Center.

Is the LUA server's network completely seperate from the SEPM's network?  There is no location on which the LUA server can place content that the SEPM can reach? 

If so there will be manual action needed daily.  There have been other customers who have configured LUA to download materials and then distribute them to a USB key, which was then carried to another physical network.  The contents were manually copied to a location which the SEPM was configured to use as its source.

Let the forum know if additional help is needed in setitng somethign like that up.

Thanks again

Mick 

version 11.0.6200.754

what is luall.exe and where i can download it

two Completely Seperate Networks? ????

no underestand . i cannot chek liveupdate administrator

Go to Start, Run, and type luall.exe on the command line.  LiveUpdate should launch straight away.

in client run it and i see it but the client not update

The following Symantec products and components are installed on your computer.
> Antivirus and antispyware definitions
> Intrusion Prevention signatures
> LiveUpdate
> Submission Control signatures
> Symantec Endpoint Protection client
> Symantec Security Software
> Symantec Security Software Update
> Symantec Shared Components

Initializing...
Connecting to Default Production Distribution Center...
Downloading catalog file (1 of 14), product up-to-date.
Downloading catalog file (2 of 14), product up-to-date.
Downloading catalog file (3 of 14), product up-to-date.
Downloading catalog file (4 of 14), product up-to-date.
Downloading catalog file (5 of 14), product up-to-date.
Downloading catalog file (6 of 14), product up-to-date.
Downloading catalog file (7 of 14), product up-to-date.
Downloading catalog file (8 of 14), product up-to-date.
Downloading catalog file (9 of 14), product up-to-date.
Downloading catalog file (10 of 14), product up-to-date.
Downloading catalog file (11 of 14), product up-to-date.
Downloading catalog file (12 of 14), product up-to-date.
Downloading catalog file (13 of 14), product up-to-date.
Downloading catalog file (14 of 14), product up-to-date.
All of the Symantec products installed on your computer are currently up-to-date. Remember to check for new updates frequently.

LiveUpdate session is complete.

i dont not underestant how do i work

i have a lan1 in built1 that connect to internet and i have lan2 in  built2 that not connect to internet

i have to update database norton in lan1 then copy it whit flash memory and paste in lan2 in built2

now how i do

I expect that this will work:

1) In LUA 2.x, create a production Distribution Center that specifies the URL and other details of the desired "pick up" location on lan2.  (Yes, LUA cannot actually reach lan2- it does not matter)  Call it DCLAN2 or something similar.

2) Export the Settings.Hosts.LiveUpdate file that contains the details for this DCLAN2.  Copy that Settings.Hosts.LiveUpdate file to the flash card and carry it over to LAN2.  Put the flash card in the SEPM machine and place Settings.Hosts.LiveUpdate in same folder of the SEPM where the SEPM server's log.liveupdate file is located.

3) Every day on the LUA server, download all the necessary SEP updates and distribute them to clu-prod. 

4) Every day, copy the files from clu-prod onto your flash drive and carry it over to be pasted into the DCLAN2/"pick up" location on lan2. 

5) Every day run luall.exe on the SEPM and it should go to the DCLAN2 location where you have pasted the files.  The SEPM should find what it needs there and update!

Hope this helps!

Mick

do you underestand what you say

i have a lan1 that coneect to internet not connect to lan 2

Settings.Hosts.LiveUpdate a file have test that way to server that update save in it

when lan 1 create Settings.Hosts.LiveUpdate file show a way in lan 1

than when this file copy in lan 2 than show way to lan 1

my lan 1 and lan 2 separator physycally

please help correct and if not khnow say not khnow!!!!!!!!!!!!!!!!!!

Have you checked this article.

You can distribute the Content using IIS as well

https://www-secure.symantec.com/connect/articles/configuring-distribution-center-lua

I have just spent some time confirming 100% that the steps above work.  Just create the Distribution Center: it does not matter if the test says it is "unreachable."  You can still export the settings for for it.

If you are having trouble creating via LUA 2.x's GUI that settings.hosts.liveupdate file for the desired "pick up" location on lan2, you can manually create one with notepad.  The only difficult part will be if there is a username and password necessary to access that shared folder or directory.

Here is how the file will look if the location on your lan2 was on server 10.10.10.10:

HOSTS\0\ACCESS=10.10.10.10:80/name_of_folder
HOSTS\0\ACCESS2=http://10.10.10.10:80/name_of_folder
HOSTS\0\IS_SYMANTEC:
HOSTS\0\LOGIN:
HOSTS\0\NAME=DCLAN2
HOSTS\0\PASSWORD:
HOSTS\0\SUBNET=0.0.0.0
HOSTS\0\SUBNETMASK=0.0.0.0
HOSTS\0\TYPE=HTTP

HOSTS\NUM_HOSTS=1

Hope this helps!

Mick

Hi again,

Is this now working for you?

Please do let the forum community know.  Your experiences will be of use to future forum users in the same situation.

Thanks and best regards,

Mick

So Is it working now 

in page   Download & Distribute i add download and create   download schedule and config it

then add distribution and  create distribution schedule and config it

in line distribution schedule click run now and  cmplete %100 and ave in C:\TempDownload about 2gb

that a time remove it

in line download schedule click run now  but not complete it why?

what is distribution schedule and download schedule?

which of them firest run?

when run distribution schedule what is update?

when run download schedule what is update?

after temp C:\TempDownload  clean , in C:\Program Files\Symantec\LiveUpdate Administrator\clu-prod , this folder abut 2gb what is it ? i copy all of folder every and send to lan2?

fter temp C:\TempDownload  clean , in C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate Administrator\Downloads about 2gb what is it?

whay when run download schedule is not complet ?

Hi again mrezap2000,

Good to hear from you again- I feared we would never get confirmation if this custom manner of using LUA 2.x was working in your environment.  &: )

Download the contents first, then distribute them.  By default they will be dsitributed to the LUA server's clu-prod directory.

After the distribution is complete, copy the files from clu-prod to your flash drive.  Do not copy from TempDownloads. 

Do I understand correctly that your LUA server's download tasks are not completing?  What error message is listed?  Read this thread and see if the error described matches yours: https://www-secure.symantec.com/connect/forums/live-update-server-stopped-downloading-definition-files

Please keep the forum up-to-date with your progress!  I am looking forward to seeing your thread brought to a successful conclusion.

Thanks again,

Mick

Yes, the presence of that "corrupt" file points toward the known issue. 

See "Intermittent "Package is not trusted" errors for various product update files during LiveUpdate Administrator 2.x download phase" (http://www.symantec.com/docs/TECH141217)

Make this change and the downloads should succeed:

Tuning lua_static.properties

A measure that many customers have used is to improve the rate of successful downloads is to reduce the number of items that LUA 2.x attempts to simultaneously download.

The parameters in the file C:\Program Files\Symantec\LiveUpdate Administrator\tomcat\webapps\lua\WEB-INF\classes\lua_static.properties be changed to control how LUA 2.x downloads files.

The "max.segmented.pool.size" line controls the thread pool that is used to download updates. If it is left at the default value of 40, then LUA will attempt to download 40 files simultaneously. Reducing that value to a lower value like 3, 5, or 10 may improve performance (intact files downloaded completely before LUA attempts to begins another).

Please restart Tomcat after making any change to lua_static.properties.

max.segmented.pool.size=40

#download thread will wait for 3 hours ( in millisecons ) maximum for an update download.
max.process.update.timeout=10800000
max.publish.payload.thread.timeout=10800000

i increase 40  &10800000 ?

what i do

Change it to:

max.segmented.pool.size=5

and restart LUA Tomcat service.

i have LUA Apache Tomcat service no LUA Tomcat service.

Restart it after making the necessary changes, and try running the download again!

i change and restart it and run download . 84% complete  and failed

no command why not competed that i repair it only say download fail .

Instead of trying to download all of SEP all at once, try it with a single component that you need.  Try just downloading 32bit AV definitions, fro instance.  After that succeeds, try anotehr component and so on.

how every day schedule download ?

and how every day schedule Distribution ?

Was LUA able to successfully download the materials when run for each component?

All the downloads aftre that will be smaller jobs (if run every day.)  The following instructions will help you to create a schedule for download and distribution. 

Installing and Configuring LiveUpdate Administrator 2.x (LUA 2.x) (http://www.symantec.com/docs/TECH102701)

To create a new download schedule

1. On the Download & Distribute tab, in the Schedules window, click Add Download.
2. In the Add Download Schedule box, enter the following:
   • Distribution schedule name A descriptive name for this schedule.
   • Status Enabled or Disabled
   • Description Enter a description for this schedule.
3. In the "Select Products" box, click Add.
4. Select the products that you want to add to this schedule and then click Add.
5. In the "Available Components" box, click the component you want to add, and then click Add. Or, click Add All to add all of the product components to the schedule.
6. Select the test status that you want to assign to the schedule.
   By default, the test status is set to Skip Test. Set the status to Must Test to test the updates before you publish them.
7. In the Select Schedule box, set the download schedule.
8. Click OK to save the schedule, or click Cancel to cancel this action.
9. To run a manual download request that is based on an existing schedule. In the right pane, under Schedules, select an existing Download Schedule, and then click Run Now.

Scheduling Distribution
After you've downloaded your updates, they can be sent to either a testing distribution server, or published to a production distribution server where they can be downloaded by your LiveUpdate clients. When you add a distribution schedule, you also select the products and components that you want to associate with the schedule. This list of products and components is compared with the updates in the Manage Updates folder. Any revisions that are not already published will then be published in the current distribution session.

Note: The added products must also be added to the distribution center/s. This is accomplished through Configure > Distribution Centers, then edit an existing distribution center to add to the Product List.

To add a new distribution schedule

1. On the Download & Distribute tab, in the Schedules window, click Add Distribution.
2. In the Add Distribution Schedule box, enter the following:
   • Distribution Schedule name
   • Status, either Enabled or Disabled
   • Description
3. Select the products and components for which updates will be distributed by clicking Add.
4. In the "Select products to be added" window, select the product or products you want to add to this distribution schedule, and then click Add.
5. In the "Select Product Components" box, select the components that you want to include in the distribution schedule.
6. Click the component name and click Add.
   • Or select all components by clicking Add All.
7. In the "Distribute Content To" box, select the distribution center type, Testing, Production, or both.
8. Select the Distribution Centers. You can select all Distribution Centers, or a subset of the centers.
9. Select a "distribution schedule."
10. Click OK to save the schedule or click Cancel to cancel this action.

Please let the forum community know if this has solved everything!

With best regards,

Mick

i know how create Schedule

afte skip test there are timer for daily week month .... i want which of  is beter daily or week ..

defalt what is beter

in  elect Product Components i chose   Symantec Endpoint Protection v11.0 English and download about 3 gig if one it comlete . and run after one day it again . twice 3 gig again download or new update download

2 when download it save in C:\TempDownload

and then remove and save in C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate Administrator\Downloads

and not in C:\Program Files\Symantec\LiveUpdate Administrator\clu-prod

if run  Distribute then save in C:\Program Files\Symantec\LiveUpdate Administrator\clu-prod

what is Download & Distribute

Download is run connect to internet

Distribute not need connect to internet

please work tow obtion write to me

> download about 3 gig if one it comlete

That sounds right.  Daily updates after that will be much smaller.

> i want which of  is beter daily or week

I recommend daily

> if run  Distribute then save in C:\Program Files\Symantec\LiveUpdate Administrator\clu-prod

Yes, that is correct!  Copy the files from there to your other network.  Steps from the 20th of January:

3) Every day on the LUA server, download all the necessary SEP updates and distribute them to clu-prod. 

4) Every day, copy the files from clu-prod onto your flash drive and carry it over to be pasted into the DCLAN2/"pick up" location on lan2. 

5) Every day run luall.exe on the SEPM and it should go to the DCLAN2 location where you have pasted the files.  The SEPM should find what it needs there and update!

Thanks again,

Mick

then what is C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate Administrator\Downloads

6 gig is it

That's a location where successfully downloaded materials are stored before being distributed. 

It is important to use the "Distriubution" step.  It's the only way to keep up-to-date the catalog files which tell clients what is available.

ohhhhh why this norton  have a very erro

when a file thant not download  (Failed to download file 1298294979jtun_enn03md2.osx while processing request id 57) all prosess download canseled . why

1298294979jtun_enn03md2.osx is a SEP for Macintosh file.  Are there Macintiosh clients in the organization which have SEP 11 installed on them?  If not, configure LUA not to download these unnecessary files.  Reducing the burden on the LUA server is important, especially on slow links.

Thanks and best regards,

Mick

in the Download & Distribute  i n download schedule  i add

Symantec Endpoint Protection v11.0 English

whit all part 

i not have mac and remove from it now

please see under

 i dont about all part it and select all it and now remove any mac or macntach

are ok it

	All Products
	Symantec Endpoint Protection v11.0 English
	Behavioral Crimeware Protection
	SESM Symantec Known Application System_lumetadata 11.0
	SESM Symantec Known Application System_lumetadata v2 11.0
	SESM Symantec Known Application System 11.0
	SESM Symantec Known Application System v2 11.0
	SESM Symantec Security Content A1_lumetadata 11.0
	SESM Symantec Security Content A1_lumetadata v2 11.0
	SESM Symantec Security Content A1 11.0
	SESM Symantec Security Content A1-64_lumetadata 11.0
	SESM Symantec Security Content A1-64_lumetadata v2 11.0
	SESM Symantec Security Content A1-64 11.0
	SESM Symantec Security Content A1-64 v2 11.0
	SESM Symantec Security Content A1 v2 11.0
	SESM Symantec Security Content B1_lumetadata 11.0
	SESM Symantec Security Content B1_lumetadata v2 11.0
	SESM Symantec Security Content B1 11.0
	SESM Symantec Security Content B1-64_lumetadata 11.0
	SESM Symantec Security Content B1-64_lumetadata v2 11.0
	SESM Symantec Security Content B1-64 11.0
	SESM Symantec Security Content B1-64 v2 11.0
	SESM Symantec Security Content B1 v2 11.0
	Symantec Known Application System 1.5.0
	Firewall Rules
	SESC IPS Signatures Win32 11.0
	SESC IPS Signatures Win64 11.0
	SESM IPS Signatures Win32 11.0
	SESM IPS Signatures Win32 v2 11.0
	SESM IPS Signatures Win64 11.0
	SESM IPS Signatures Win64 v2 11.0
	LiveUpdate Updates
	LiveUpdate for Macintosh 5.1.2 English
	LiveUpdate for Macintosh 5.1.3 English
	Product Updates
	Decomposer 1.0.0
	SEP PTS Content 6.1.0
	SEP PTS Engine Win32 6.1.0
	SEP PTS Engine Win64 6.1.0
	SESC AntiVirus Client Win32 11.0 English
	SESC AntiVirus Client Win64 11.0 English
	SESC Submission Control Data 11.0
	SESM AntiVirus Client Win32 11.0.1000 English
	SESM AntiVirus Client Win32 11.0.2000 English
	SESM AntiVirus Client Win32 11.0.3001 English
	SESM AntiVirus Client Win32 11.0.4000 English
	SESM AntiVirus Client Win32 11.0.5002 English
	SESM AntiVirus Client Win32 11.0.6000 English
	SESM AntiVirus Client Win32 11.0 English
	SESM AntiVirus Client Win64 11.0.1000 English
	SESM AntiVirus Client Win64 11.0.2000 English
	SESM AntiVirus Client Win64 11.0.3001 English
	SESM AntiVirus Client Win64 11.0.4000 English
	SESM AntiVirus Client Win64 11.0.5002 English
	SESM AntiVirus Client Win64 11.0.6000 English
	SESM AntiVirus Client Win64 11.0 English
	SESM Content Catalog 11.0
	SESM Decomposer_lumetadata 11.0
	SESM Decomposer_lumetadata v2 11.0
	SESM Decomposer 11.0
	SESM Decomposer v2 11.0
	SESM SEP PTS Content_lumetadata 11.0
	SESM SEP PTS Content_lumetadata v2 11.0
	SESM SEP PTS Content 11.0
	SESM SEP PTS Content v2 11.0
	SESM SEP PTS Engine Win32_lumetadata 11.0
	SESM SEP PTS Engine Win32_lumetadata v2 11.0
	SESM SEP PTS Engine Win32 11.0
	SESM SEP PTS Engine Win32 v2 11.0
	SESM SEP PTS Engine Win64_lumetadata 11.0
	SESM SEP PTS Engine Win64_lumetadata v2 11.0
	SESM SEP PTS Engine Win64 11.0
	SESM SEP PTS Engine Win64 v2 11.0
	SESM Submission Control Data_lumetadata 11.0
	SESM Submission Control Data_lumetadata v2 11.0
	SESM Submission Control Data 11.0
	SESM Submission Control Data v2 11.0
	Symantec Endpoint Protection Client Macintosh 11.0.6000 English
	Symantec Endpoint Protection Client Macintosh 11.0.6200 English
	Symantec Scheduler for Macintosh 4.0.3 English
	Virus Definitions
	SESC Virus Definitions Win32 v11
	SESC Virus Definitions Win64 (x64) v11
	SESM Virus Definitions Win32 v11
	SESM Virus Definitions Win32 v11 v2
	SESM Virus Definitions Win64 (x64) v11
	SESM Virus Definitions Win64 (x64) v11 v2
	Symantec Endpoint Protection for Mac Virus Defs
	Symantec Endpoint Protection for Mac Virus Defs V2
	Symantec Security Content A1-64 Virus Definitions
	Symantec Security Content A1 Virus Definitions
	Symantec Security Content B1-64 Virus Definitions
	Symantec Security Content B1 Virus Definitions

i change it but in first page - home  in

 the icon is

are ok it ?

why it is

System Statistics Free Disk Space: 24,301MB Used By Database: 144MB Used By Updates: 0MB

Quick Links Add Distribution Center Add Download Schedule Add Distribution Schedule

My Symantec Products Overview   Distribution Center Coverage: Download Schedule Coverage: Distribution Schedule Coverage:  View My Symantec Products

You can probably save yourself a lot of additional bandwidth by also removing additional components that you do not use.  Please see:

LiveUpdate Administrator 2.x: What product selections are needed for specific versions of Symantec Endpoint Protection? (http://www.symantec.com/docs/TECH139618)

If you like, I can exmine the log.liveupdate from your SEPM on lan2 to ensure you select the correct components.  Just attach it to this thread.

Thanks again,

Mick

i move update file in lan 2 and save it but only server update and clients not update please help me

aloooooooooooo

Do you still require help with this configuration?  If so, can you provide an update on the current status?  There has been nothing added to this thread for months.

You may wish to open a case with Symantec Technical Support rather than rely on this peer-support forum.

repair my errors tanks