Endpoint Protection

@Chetan from where can I download the LUA 2.3.2. on the file share website  I see only 2.3.1 version.

Hi Vicky,

The installation file will be included on the SEP 12.1 RU2 DVD’s. SEP 12.1 RU2 may release at the end of this month.

However if you need it prior to this release then please call support & they will provide required credentials to download it from the fileshare.

Downloaded and upgraded my LUA server from 2.3.1 to 2.3.2.

After rebooting and attempting to run my schedules, I cannot get past this failure:

*******************************************

Download task 130 'SEP Nightly Download' has failed to complete.

Total size of files in request: 1291 MB.
Percentage Complete: 74%.

Elapsed: 0 hour(s),9 minute(s) 45 seconds.
Started: 10/5/12 9:27:58 AM MDT
Ended: 10/5/12 9:37:43 AM MDT

Further detail on the failures is provided below.

Server Location: Symantec LiveUpdate.
Failed file transfers: 34
Successful file transfers: 1002
Reason for failure: Connection failure.

While I have gotten very used to rebuilding my LUA server, I was hoping there was another solution. Delete some files, change the source server, etc...

Yes I'm going through a proxy, but it has worked flawlessly for many months.

Any thoughts?

Thanks, Mike

yes that is correct, I have installed LUA v 2.3.2 successfully.

I got it by emailing enterprise_support@symantec.com and then Once you have downloaded the utility, please follow the instructions outlined in the following document.

Title: 'Best Practices for LiveUpdate Administrator (LUA) 2.x'
Web URL: http://www.symantec.com/business/support/index?page=content&id=TECH93409

Title: 'Installing and Configuring LiveUpdate Administrator 2.x (LUA 2.x)'
Web URL: http://www.symantec.com/business/support/index?page=content&id=TECH102701

So for whatever reason this new version of LUA is pounding our external firewall (and our firewall is responding by cutting off LUA at the knees) in a way it has not done in the past. This is happening on all of the Symantec source servers using port 80. If I switch to ONLY use the FTP Failover Server on port 21, then all seems to work. At least my downloads all worked.

Not sure what changed internally with LUA 2.3.2, but from a corporate perspective it feels more aggresive.

-Mike

Hi Mike,

Cheers for the feedback. Can you elaborate on "pounding" - do you mean more traffic or more threads?

SEP 12.1 has increased the size of  the downloads since the beginning of August.  That would have been comign down with LUA 2.3.1 as well as 2.3.2 though.

Hi Mick,

Sorry for my vague reply.

Without getting too specific, ~60% of the traffic from the LUA server is ignoring the directive to use our proxy server and going directly to our firewall. I've used a few different proxy servers at my disposal and all exhibit the same result. The "pounding" is the fact that the traffic appears to the firewall at all...with the proxy set, I assume it shouldn't. This is ONLY when LUA is going to the Symantec HTTP Source Servers, the FTP Source Server does not seem to be affected. I guess it's possible I have the source servers and proxy misconfigured, but since it had been working just fine, I didn't think so.

Yes I'm aware that 12.1 and now 12.1 RU2 both added some volume to my downloads...2.3.1 was handling it all, for the past month or so, without issue.

If I can get you any logs to look at, just let me know.

-Mike

From where i can get the Bug fixes in this version.

Hi Prem,

The changes for each version are listed in the following article:

What's new in LiveUpdate Administrator 2.x
Article:TECH171578   |  Created: 2011-10-11   |  Updated: 2012-09-17   | 
Article URL http://www.symantec.com/docs/TECH171578 
 

 The improvements in 2.3.2 are listed above by Chetan.

Thanks Mike - that's not come to my attention before, so I'd like to take a look at your config and the logs from that LUA 2.3.2 server, if possible.  Can I ask you to open a case with Tech Support and PM me the number?

The most interesting items to look at will be the exported configuration from the server and the luadebuginfo.zip file that can be generated from the product GUI.  A SEP Support Tool from teh LUA server and the firewall logs which show connections directly from the LUA server (and the specific files it's requesting) would also be useful.

Here's a couple articles on how those LUA materials can be gathered:

How to backup and restore LiveUpdate Administrator (LUA) configuration in LUA 2.3
Article URL http://www.symantec.com/docs/TECH159239

How to Collect Troubleshooting Information from LiveUpdate Administrator 2.x
http://www.symantec.com/docs/TECH92654    

Thanks in advance!!!!

Yes, that is really helpful, especially the following feature:

Enhanced content purging to ensure it works reliably, even if an external 3rd party source (e.g. robocopy) is also accessing the content. 

Just a couple updates to this thread: 

One thing that I have done, since file sizes have gotten so large, is started to recommend increasing the Server Connection values in Configure - Properties.  These, for instance, eliminated a lot of download failures for one customer:

TIMEOUT: 120 seconds
RETRY: 5
RETRY INTERVAL: 10 seconds
 

Here's a good article on how to export the event log in LUA:

How to Export the LiveUpdate Administrator 2.x Server Event Log
Article URL http://www.symantec.com/docs/HOWTO61146 
 

As a test, I changed the timeout, retry and retry interval settings to 120, 5 and 10 respectivly.

I attempted a download and at 99% while "saving updates", the job failed.

I then restarted the LUA Apache Tomcat service and tried the download again, this time, the job completed.

While I'm hesitant to call this a fix because the download size was relatively small, it is a step in the right direction (it didn't fail).I'll watch our daily downloads for the next few days and see how things go.

Thanks for the tip Mick.

-Mike

I've put this and some other tips together into a new article: check it out!

LiveUpdate Administrator 2.x Server Connection Recommendations

https://www-secure.symantec.com/connect/articles/liveupdate-administrator-2x-server-connection-recommendations

I've put this and some other tips together into a new article: check it out!

LiveUpdate Administrator 2.x Server Connection Recommendations

https://www-secure.symantec.com/connect/articles/liveupdate-administrator-2x-server-connection-recommendations

(Apologes for this duplicate: was getting "Gateway Timed Out" errors when posting.  Admin, please delete and deduct the point.  Thanks!  Mick)

I've put this and some other tips together into a new article: check it out!

LiveUpdate Administrator 2.x Server Connection Recommendations

https://www-secure.symantec.com/connect/articles/liveupdate-administrator-2x-server-connection-recommendations

Sadly, every job after the success above failed. Switching my source servers back to FTP had got me going again.

-Mike

Ok...looks like we have a SUCCESS!!

Well I was thoroughly skeptical, but adding the timeout information above, and these additional settings:

The second place to change settings is in the file ...\Symantec\LiveUpdate Administrator\tomcat\webapps\lua\WEB-INF\classes\lua_static.properties - lua_static.properties can be opened in notepad, textpad or your favorite text editor. I recommend updating the following values to increase the number of retries and period between retries:
 
download.retry.corruptFile=3
download.resume.corruptFile.retry=10
download.retry.corruptFile.sleep.msec=20000
download.http.header.acceptRanges=bytes

Do be sure to restart the LUA Tomcat service in order to reflect these changes.  Those changes will not go into effect until Tomcat restarts!

Seemed to have resolved my issues. Using the "LiveUpdate Administrator 2.x Server Connection Recommendations" Mick posted above has made all the difference.

Thanks Mick!!

-Mike

thanks for sharing the solution here Mr. ADmin !

Glad to help, Mike!  Many thanks for updating the thread with your results.  &: )

I am currently running LUA 2.3.1.82 and when i try to install 2.3.2 the installer just informs me that LiveUpdate Administrator is already installed and won't do anything

Hm.. that soudns strange, I can just inline upgrade the LUA server from 2.3.1 to 2.3.2 without any issue.

How about trying to uninstall the old version of LUA if I were you.

Another issue i have had 4 times now when upgrading from 2.3.1 is that despite the upgrade appearing to complete successfully, when i attempt to browse to the login page i simply get the following returned:

The page you tried to access does not exist.

Hi Alex,

You are probably best opening a case with Technical Support for an issue as serious as that. 

If you have exported the LUA 2.3.1's config settings beofre starting the upgrade, you can uninstall LUA and perform a new, clean install.  Then just import those settings and all should be well, though you will need to download the files once again.

Hope this helps!
 

Mick