Endpoint Protection

Hi, NEED help!!!

Clean win7(64 bit) client.
Installing as an Administrator
Windows Defender service -> Disabled
Windows Firewall service -> Disabled
Installed SEP 11.0.5002.333/LU 3.3
Selected Unmanaged client.
Selected Antvirus and Antispyware Protection as an only enabled feature to install on disk.
SEP Install completed.
No reboot message. But rebooted manually.
Windows Defender service -> Still Disabled
Windows Firewall service -> Still Disabled
As Administrator selected SEP LiveUpdate
Liveupdate Status - displayed following error

 

 

  

Also where are the log files to the LiveUpdate status?
The LiveUpdate Express automatically closes without allowing the user to scroll through the status

The LiveUpdate log on Windows 7 is located in:
 - C:\ProgramData\Symantec\LiveUpdate\Log.LiveUpdate

It's not the easiest log to decipher... so if you post it here, someone could probably help.

This doc has some basic things you can check, too.
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2006042008465548

Make sure you're not using a Proxy server... or if you are, that it's configured correctly.

////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Start LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
5/21/2010, 18:12:41 GMT -> LuComServer version: 3.3.0.92
5/21/2010, 18:12:41 GMT -> LiveUpdate Language: English
5/21/2010, 18:12:41 GMT -> LuComServer Sequence Number: 20090713
5/21/2010, 18:12:41 GMT -> OS: Windows 7 [Product:0x00000030], Service Pack: 0, Major: 6, Minor: 1, Build: 7600 (64-bit)
5/21/2010, 18:12:41 GMT -> System Language:[0x0409], User Language:[0x0409]
5/21/2010, 18:12:41 GMT -> IE 7 Support
5/21/2010, 18:12:41 GMT -> ComCtl32 version: 6.16
5/21/2010, 18:12:41 GMT -> IP Addresses: 2002:314:a34c::314:a34c, 3.20.163.76
5/21/2010, 18:12:41 GMT -> Loading C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
5/21/2010, 18:12:41 GMT -> Opened the product inventory at "C:\ProgramData\Symantec\LiveUpdate\Product.Inventory.LiveUpdate".
5/21/2010, 18:12:41 GMT -> Combined Product Inventory Flags 0, Permanent Flags 0, Permanent Flags Filter 0
5/21/2010, 18:12:41 GMT -> LiveUpdate flag value for this run is 0
5/21/2010, 18:12:41 GMT -> ProductRegCom/luGroup(PID=2888/TID=3596): Successfully created an instance of an luGroup object!
5/21/2010, 18:12:41 GMT -> ProductRegCom/luGroup(PID=2888/TID=3596): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\luall.exe.
5/21/2010, 18:12:41 GMT -> ProductRegCom/luGroup(PID=2888/TID=3596): Destroyed luGroup object.
5/21/2010, 18:12:41 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\hosts
5/21/2010, 18:12:41 GMT -> Scanning the following file for potentially malicious host entries: C:\Windows\system32\Drivers\etc\lmhosts.sam
5/21/2010, 18:12:41 GMT -> LiveUpdate did not find any malicious host entries in any hosts files.
5/21/2010, 18:12:41 GMT -> **** Starting an Express Mode LiveUpdate Session ****
5/21/2010, 18:12:41 GMT -> User Type: Administrator.
5/21/2010, 18:12:42 GMT -> ***********************        Start of New LU Session        ***********************
5/21/2010, 18:12:42 GMT -> EVENT - SESSION START EVENT - The LiveUpdate session is running in Express Mode.
5/21/2010, 18:12:42 GMT -> Check for updates to:  Product: LiveUpdate, Version: 3.3.0.92, Language: English.  Mini-TRI file name: liveupdate_3.3.0.92_english_livetri.zip
5/21/2010, 18:12:42 GMT -> LiveUpdate is about to launch a new callback proxy process for product SESC Virus Definitions Win64 (x64) v11 with moniker {1CD85198-26C6-4bac-8C72-5D34B025DE35}.
5/21/2010, 18:12:42 GMT -> Starting Callback Proxy Worker thread.
5/21/2010, 18:12:43 GMT -> The callback proxy for moniker {1CD85198-26C6-4bac-8C72-5D34B025DE35} was successfully registered with LiveUpdate.
5/21/2010, 18:12:43 GMT -> LiveUpdate successfully launched a new callback proxy process for product SESC Virus Definitions Win64 (x64) v11.
5/21/2010, 18:12:43 GMT -> LiveUpdate is about to execute a PreSession callback for product SESC Virus Definitions Win64 (x64) v11.
5/21/2010, 18:12:43 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Successfully created an instance of an luProductReg object!
5/21/2010, 18:12:43 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/21/2010, 18:12:44 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.HUBDEFS, Value = 90917021
5/21/2010, 18:12:44 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.CURDEFS, Value = 90917021
5/21/2010, 18:12:44 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Setting property for Moniker = {1CD85198-26C6-4bac-8C72-5D34B025DE35}, PropertyName = SEQ.CURDEFS, Value = 90917021
5/21/2010, 18:12:44 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Destroyed luProductReg object.
5/21/2010, 18:12:44 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Successfully created an instance of an luProductReg object!
5/21/2010, 18:12:44 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/21/2010, 18:12:44 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = VERSION, Value = MicroDefsB.Sep
5/21/2010, 18:12:44 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.HUBDEFS, Value = 90917021
5/21/2010, 18:12:44 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Setting property for Moniker = {DFB8BBDD-52DE-427e-9EB3-FB7665893221}, PropertyName = SEQ.CURDEFS, Value = 90917021
5/21/2010, 18:12:44 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Destroyed luProductReg object.
5/21/2010, 18:12:44 GMT -> The callback proxy finished executing the callback with a result code of 0x0
5/21/2010, 18:12:44 GMT -> The PreSession callback for product SESC Virus Definitions Win64 (x64) v11 completed with a result of 0x0      
5/21/2010, 18:12:44 GMT -> Progress Update: TRYING_HOST: HostName: "liveupdate.symantecliveupdate.com" URL: "http://liveupdate.symantecliveupdate.com" HostNumber: 0
5/21/2010, 18:12:44 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
5/21/2010, 18:12:44 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.92_english_livetri.zip
5/21/2010, 18:12:44 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/21/2010, 18:12:44 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "Symantec LiveUpdate" AccessType: 0x0      
5/21/2010, 18:12:44 GMT -> Progress Update: PROMPT_RAS_DIALUP:possibly prompting the RAS dialogue...
5/21/2010, 18:12:44 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "r6l8yFUIE+vQNfNslinEdDGOVg4Gc32SwAAAAA" AccessType: 0x0      
5/21/2010, 18:12:44 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.92_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/21/2010, 18:12:56 GMT -> HttpSendRequest (status 404): Request failed - File does not exist on the server.
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.0.92_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\liveupdate_3.3.0.92_english_livetri.zip" HR: 0x802A0026
5/21/2010, 18:12:56 GMT -> HR 0x802A0026 DECODE: E_HTTP_NOT_FOUND
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x0       , Num Successful: 0
5/21/2010, 18:12:56 GMT -> LiveUpdate will check for Mini-TRI file support on the server since the first Mini-TRI file was not available (liveupdate_3.3.0.92_english_livetri.zip).
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/21/2010, 18:12:56 GMT -> CSendHTTPRequest::SendRequest - Unable to resolve the name of the server.
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantecliveupdate.com/minitri.flg", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\minitri.flg" HR: 0x802A0045
5/21/2010, 18:12:56 GMT -> HR 0x802A0045 DECODE: E_UNABLE_TO_REACH_SERVER
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x802A0045, Num Successful: 0
5/21/2010, 18:12:56 GMT -> HR 0x802A0045 DECODE: E_UNABLE_TO_REACH_SERVER
5/21/2010, 18:12:56 GMT -> EVENT - SERVER SELECTION FAILED EVENT - LiveUpdate failed to connect to server liveupdate.symantecliveupdate.com at path  via a HTTP connection. The server connection attempt failed with a return code of 1853, LiveUpdate had an internal error while getting your updates.
5/21/2010, 18:12:56 GMT -> Progress Update: TRYING_HOST: HostName: "liveupdate.symantec.com" URL: "http://liveupdate.symantec.com" HostNumber: 1
5/21/2010, 18:12:56 GMT -> Progress Update: DISCONNECT
5/21/2010, 18:12:56 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
5/21/2010, 18:12:56 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.92_english_livetri.zip
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/21/2010, 18:12:56 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "r6l8yFUIE+vQNfNslinEdDGOVg4Gc32SwAAAAA" AccessType: 0x0      
5/21/2010, 18:12:56 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "r6l8yFUIE+vQNfNslinEdDGOVg4Gc32SwAAAAA" AccessType: 0x0      
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantec.com/liveupdate_3.3.0.92_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/21/2010, 18:12:56 GMT -> CSendHTTPRequest::SendRequest - Unable to resolve the name of the server.
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "http://liveupdate.symantec.com/liveupdate_3.3.0.92_english_livetri.zip", Full Download Path: "C:\ProgramData\Symantec\LiveUpdate\Downloads\liveupdate_3.3.0.92_english_livetri.zip" HR: 0x802A0045
5/21/2010, 18:12:56 GMT -> HR 0x802A0045 DECODE: E_UNABLE_TO_REACH_SERVER
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x802A0045, Num Successful: 0
5/21/2010, 18:12:56 GMT -> HR 0x802A0045 DECODE: E_UNABLE_TO_REACH_SERVER
5/21/2010, 18:12:56 GMT -> EVENT - SERVER SELECTION FAILED EVENT - LiveUpdate failed to connect to server liveupdate.symantec.com at path  via a HTTP connection. The server connection attempt failed with a return code of 1814, LiveUpdate could not retrieve the catalog file of available Symantec product and component updates.
5/21/2010, 18:12:56 GMT -> Progress Update: TRYING_HOST: HostName: "update.symantec.com" URL: "ftp://update.symantec.com/opt/content/onramp" HostNumber: 2
5/21/2010, 18:12:56 GMT -> Progress Update: DISCONNECT
5/21/2010, 18:12:56 GMT -> Progress Update: TRIFILE_DOWNLOAD_START: Number of TRI files: 0 Downloading LiveUpdate catalog file
5/21/2010, 18:12:56 GMT -> LiveUpdate will download the first Mini-TRI file, liveupdate_3.3.0.92_english_livetri.zip
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_BATCH_START: Files to download: 1, Estimated total size: 0
5/21/2010, 18:12:56 GMT -> Progress Update: PRE_CONNECT: Proxy: "(not-available)" Agent: "r6l8yFUIE+vQNfNslinEdDGOVg4Gc32SwAAAAA" AccessType: 0x0      
5/21/2010, 18:12:56 GMT -> Progress Update: CONNECTED: Proxy: "(not-available)" Agent: "r6l8yFUIE+vQNfNslinEdDGOVg4Gc32SwAAAAA" AccessType: 0x0      
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "ftp://update.symantec.com/opt/content/onramp/liveupdate_3.3.0.92_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads"
5/21/2010, 18:12:56 GMT -> CstInetGetFile::DoTransfer - Unable to resolve the name of the server.
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: "ftp://update.symantec.com/opt/content/onramp/liveupdate_3.3.0.92_english_livetri.zip", Full Download Path: "(null)" HR: 0x802A0045
5/21/2010, 18:12:56 GMT -> HR 0x802A0045 DECODE: E_UNABLE_TO_REACH_SERVER
5/21/2010, 18:12:56 GMT -> Progress Update: DOWNLOAD_BATCH_FINISH: HR: 0x802A0045, Num Successful: 0
5/21/2010, 18:12:56 GMT -> HR 0x802A0045 DECODE: E_UNABLE_TO_REACH_SERVER
5/21/2010, 18:12:56 GMT -> EVENT - SERVER SELECTION FAILED EVENT - LiveUpdate failed to connect to server update.symantec.com at path /opt/content/onramp via a FTP connection. The server connection attempt failed with a return code of 1814, LiveUpdate could not retrieve the catalog file of available Symantec product and component updates.
5/21/2010, 18:12:56 GMT -> Progress Update: HOST_SELECTION_ERROR: Error: 0x802A0027
5/21/2010, 18:12:56 GMT -> LiveUpdate did not find any new updates for the given products.
5/21/2010, 18:12:56 GMT -> EVENT - SESSION END FAILED EVENT - The LiveUpdate session ran in Express Mode. LiveUpdate found 0 updates available, of which 0 were installed and 0 failed to install.  The LiveUpdate session exited with a return code of 1814, LiveUpdate could not retrieve the catalog file of available Symantec product and component updates.
5/21/2010, 18:13:00 GMT -> LiveUpdate is about to execute a PostSession callback for product SESC Virus Definitions Win64 (x64) v11.
5/21/2010, 18:13:01 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Successfully created an instance of an luProductReg object!
5/21/2010, 18:13:01 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Path for calling process executable is C:\Program Files (x86)\Symantec\LiveUpdate\LuCallbackProxy.exe.
5/21/2010, 18:13:01 GMT -> ProductRegCom/luProductReg(PID=2248/TID=2368): Destroyed luProductReg object.
5/21/2010, 18:13:01 GMT -> The callback proxy finished executing the callback with a result code of 0x0
5/21/2010, 18:13:01 GMT -> The PostSession callback for product SESC Virus Definitions Win64 (x64) v11 completed with a result of 0x0      
5/21/2010, 18:13:01 GMT -> Successfully released callback {855BA5F4-6588-4F09-AE61-847E59D08CB0}
5/21/2010, 18:13:01 GMT -> LiveUpdate has called the last callback for product SESC Virus Definitions Win64 (x64) v11, so LiveUpdate is informing the callback proxy that it can exit.
5/21/2010, 18:13:01 GMT -> The callback proxy executable for product {1CD85198-26C6-4bac-8C72-5D34B025DE35} is exiting with no errors
5/21/2010, 18:13:01 GMT -> ***********************           End of LU Session           ***********************
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// End LuComServer
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////

Check this first
How to determine whether your firewall is blocking LiveUpdate