Endpoint SWAT: Protect the Endpoint Community

 View Only
  • 1.  URL's for default Symantec Liveupdate server

    Posted Oct 10, 2013 05:22 AM

    What are the URL's required to be added to a proxy firewall server to allow a SEP client to get updates from the default Symantec liveupdate server?

    Are there any ports as well to be allowed?



  • 2.  RE: URL's for default Symantec Liveupdate server

    Posted Oct 10, 2013 05:28 AM

    URLs

    hosts/0/url=http://liveupdate.symantecliveupdate.com:80
    hosts/1/url=http://liveupdate.symantec.com:80
    hosts/2/url=ftp://update.symantec.com/opt/content/onramp

    http://liveupdate.symantecliveupdate.com

    http://liveupdate.symantec.com

    ftp://update.symantec.com/opt/content/onramp

     

    http://www.symantec.com/business/support/index?page=content&id=TECH95790&locale=en_US



  • 3.  RE: URL's for default Symantec Liveupdate server

    Posted Oct 10, 2013 05:28 AM


  • 4.  RE: URL's for default Symantec Liveupdate server

    Trusted Advisor
    Posted Oct 10, 2013 08:16 AM

    Hello,

    For Symantec Liveupdate, allow these urls - 

    http://liveupdate.symantecliveupdate.com
    http://liveupdate.symantec.com
    ftp://update.symantec.com

    Also, Check these Articles for making proper exceptions : 

    How to Update the Proxy settings in the Symantec Endpoint Protection Manager (SEPM) 12.1

    https://www-secure.symantec.com/connect/articles/how-configure-proxy-settings-symantec-endpoint-protection-manager-sepm-121

    Required exclusions for proxy servers to allow Symantec Endpoint Protection to connect to Symantec reputation and licensing servers

    http://www.symantec.com/docs/TECH162286

    Hope that helps!!



  • 5.  RE: URL's for default Symantec Liveupdate server
    Best Answer

    Broadcom Employee
    Posted Oct 10, 2013 08:39 AM

    Hi,

    Thank you for posting in Symantec community.

    Make sure that the firewall allows the LiveUpdate executable to connect to the Internet through the correct ports and that the firewall allows connections to the correct domains. Read your firewall's documentation or contact the manufacturer to find out how to confirm these settings.

    • LiveUpdate connects over TCP ports 80 (HTTP), 21 (FTP) and 443 (HTTPS).
    • The file that connects to the Internet is LuComServer_*_*.exe in LiveUpdate 2.5 and later and Lucomserver.exe in LiveUpdate 2.0 and earlier.
    • The default folder for this file is C:\Program Files\Symantec\LiveUpdate.
    • LiveUpdate connects via HTTP to the domains liveupdate.symantecliveupdate.comliveupdate.symantec.com, and akamai.net.
    • If a connection fails, LiveUpdate tries to connect to one of the other listed domains. The listed domains may change because of server maintenance.
    • If LiveUpdate cannot make an HTTP connection, LiveUpdate connects via FTP to update.symantec.com/opt/content/onramp.

    Note: Symantec does not supply IP addresses for Symantec LiveUpdate servers. The server addresses are not static and, consequently, routing directly to an IP address may cause LiveUpdate to fail.

    Reference: http://www.symantec.com/docs/TECH139451

    Which Communications Ports does Symantec Endpoint Protection use?

    http://www.symantec.com/docs/TECH163787

    Best Practices: Configuring a Symantec Endpoint Protection environment in a DMZ

    http://www.symantec.com/docs/TECH178325



  • 6.  RE: URL's for default Symantec Liveupdate server

    Posted Oct 15, 2013 08:45 AM

    je repose ma question, j'ai un serveur central qui est connecté directement au site de symantes et fait régulièrement ses mise jour.

    je souhaiterais configurer des fournisseurs de mise à jour en utilisant l'option "utiliser un serveur LiveUpdate interne spécifique"

    en cliquant sur ajouter j'ai une fenêtre avec des chamos à renseigner:

    NOM DU SERVEUR:.............................

    DESCRIPTION

    URL:...............................

    NOM UTILISATEUR:.............................

    MOT DE PASSE:...........................

    merci de votre aide pour ces informations à renseigner surtout l'url.



  • 7.  RE: URL's for default Symantec Liveupdate server

    Posted Oct 15, 2013 09:01 AM

    Est-ce que cette url vous aider

    Mise en place d'un serveur LiveUpdate interne
    Article: HOWTO55180 | Créé le: 2011-06-29 | Mis à jour le: 2011-12-16 | Article URL http://www.symantec.com/docs/HOWTO55180

     

    Configure liveupdate to run on Symantec Endpoint Protection Manager (SEPM)

     https://www-secure.symantec.com/connect/articles/configure-liveupdate-run-client-computers