Symantec 14.3 can not update in firewall policy

[Anderson Hsu]

hi,
Because i add firewall policy, it can not directly symantec live update ,
although i add symantec url to ****, but it still not working. is
there other policy or port which i need to add ? Thanks.

[Russ_V]

Hi Anderson, 

Thanks for reaching out. 

Kindly make sure that your systems can reach the Symantec Live Update server. 

For more info regarding urls you need to allow in your Firewall and/or proxy see this link: 
https://knowledge.broadcom.com/external/article/151267/determine-whether-your-firewall-is-block.html

Best,

Russ_V

[Anderson Hsu]

Thanks. But I don't understand about *Livetri.zip file, how to use it?
Kindly advise. *

[Russ_V]

Hi Anderson,

Thanks for your reply. 

So once you've allowed your SEP clients to reach Symantec Live Update you would then try to download Livetri.zip as mentioned in the kb as a test.  

If you're unable to download it, or if you can download it successfully but you're missing one or more of the files Liveupdt.sig, Liveupdt.tri, or Liveupdt.grd then you'll need to figure out if the firewall is still blocking.  

Ideally you should be able to download Livetri.zip with all the files present. 

If you're able to download all the files, and you still have an issue then kindly create a case with Support to investigate further. 

Best,

Russ_V

[Anderson Hsu]

Hi
I should understand what you mean , do you mean If I can download the file,
my firewall policy should be right. (I don't know when I download the file,
what I should do next)
Thanks.

<https: www.avast.com sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
乾淨無病毒。www.avast.com
<https: www.avast.com sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

[Russ_V]

Hi Anderson, 

Thanks for your response. 

Correct! If you can download Livetri.zip without issue then your firewall policy should be fine.

If you still can't download Livetri.zip then you'll need to investigate why not with your network team. 

Once you are able to download it fine, retest running Live Update to confirm its working as expected. 

If its still not working, then open a ticket with Support for further assistance. 

Best,

Russ_V