SEP for Mac Internal LiveUpdate Server Issues

[Migration User]

I'm having some trouble getting SEP for Mac LiveUpdate to work from any internal liveupdate server.  The only place it will pull updates from is a Symantec LiveUpdate Server.  I have tried my local LiveUpdate Administrator (LUA 2.2.2.9) server, with no luck.  I have also tried LiveUpdate Administration Utility (LUAU 2.1.1) on one of my xServes with no luck.

On LUA I have tried the SAV for Mac 10,10.1,10.2 and NAV for Mac 11 updates, but when the client connects to LUA to check for updates it says it is up to date.  (Even though the client is running the definitions that the SEP 11.0.6a install DVD was relased with).

I have no idea how to check which product defintions are downloading using LUAU, all I know is it downloaded 28 files after I installed it this morning and the client tells me that it is current just like it does with LUA.

I am using a LiveUpdate policy from my SEPM to point it to both locations, one at a time.  I have checked and am able to download the livetri.zip from both LUA and LUAU.  I can also look at any other files that are stored along with livetri.zip

Has anyone gotten SEP for Mac to successfully update from an internal LiveUpdate server?

Thanks,
Chris

[Rafeeq]

have you checked this discussion?

https://www-secure.symantec.com/connect/forums/liveupdate-logging-sep-110-ru6-mac-os-x

[Migration User]

Yeah checked that one out already.  Its a different problem.  The client successfully checks for updates. Thanks!

[Rafeeq]

not worked much on MAC; sandra should will
 help you out...

[Migration User]

But in case not:

Title: 'Using the LiveUpdate Administration Utility on a PC to download updates for Symantec Endpoint Protection/Symantec AntiVirus 10 for Macintosh clients'
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007152728050998

sandra

[Migration User]

The biggest issue I see when it comes to definition updates is proxy -- Java LiveUpdate does not work well with proxies and it is recommended they be bypassed at the client level for updates.  However, being an LUA server, I would imagine that this should not be an issue.

Title: 'Proxies and compatibility with Symantec Endpoint Protection/Symantec AntiVirus/Norton AntiVirus for Macintosh and Java LiveUpdate'
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007733776807898

The other biggie is, if you are using IIS to host your LUA distribution site, you will want to add the file types present in the directory as MIME types, otherwise IIS will not serve them.  However, what you're describing doesn't really sound like this, or you'd get an "There was an error performing the update" message.

Title: '"There was an error performing the update" when running Macintosh LiveUpdate retrieving updates from an IIS server'
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009021311350848

The client should be pointing to the LUA distribution point, not the download folder... though it sounds like it's making that contact and saying there's nothing to get.

Please feel free to post your LiveUpdate log and conf file for review.

/Library/Application Support/Symantec/LiveUpdate/liveupdate.conf
/Library/Application Support/Symantec/LiveUpdate/liveupdt.log

Thanks,
sandra
ps. You will definitely want LUA for SEP for Mac, not LUAU on a Mac.

[Migration User]

Sandra,
    Thanks for your response.  There is no proxy server between the client and server.  (either LUA or LUAU).  I can see and access all the files that are located in the distribution center.  Both through the file system locally to the server and over http using a web browser on the client.  And finally the client does point to the distribution point.  I have attached the log files.   I only setup LUAU on the off chance that it might work, have been running LUA for all of my SAV for Mac v10.2 clients for some time now.

I've been looking through files on the LUA distribution point trying to find anything named referencing SEP for Mac, but can't find any.  The log file sure seems to be trying to find something that says symantec$20endpoint$20protection$20for$20mac$20....   I'm wondering if this has something to do with my problem.  

-Chris

Attachment(s)

liveupdate_1.doc   31 KB 1 version

liveupdateconf.doc   19 KB 1 version

[Migration User]

You're welcome.  The conf file looks correct.  And the log file indicates it's connecting and is able to get the minitri:

Jun 14, 2010 4:16:44 PM Downloading minitri.flg to /private/tmp/liveupdate/1276546604170/minitri.flg ... 
Jun 14, 2010 4:16:44 PM Connecting to lua.XXXXXX:7070 via HTTP ... 
Jun 14, 2010 4:16:44 PM Connected to 10.1.XXXXXX sending request ... 
Jun 14, 2010 4:16:44 PM Waiting for response ... 
Jun 14, 2010 4:16:44 PM Receiving file ... 
Jun 14, 2010 4:16:44 PM Transfer completed in 11 ms (23,636 bytes/sec) 

However, the other three Downloading requests (which is not the actual download, but a request to begin the download; you'll see "Downloading" comes before "Connecting") never get the "Receiving file / Transfer completed" portion.  It goes straight from "Waiting for response" to the next "Downloading" prompt.

Jun 14, 2010 4:16:44 PM Waiting for response ... 
   [no receiving file, no transfer complete]
Jun 14, 2010 4:16:44 PM Downloading symantec$20endpoint$20protection$20for$20mac...

It does appear to be requesting SEP specific files--do you see files with those names in your distribution center?  Double check the products available and make sure there's distribution coverage for all of them.  (Looks like I may need to set up an LUA again to play around with this.)

sandra

[Migration User]

Sandra,
    There are no files listed on the distribution center that have anything to do with SEP (I only use LUA for Mac updates, since all the windows clients pull from SEPM).  I have updated the product catalog for LUA and am unable to find any product listing for SEP for Mac.  I have selected all English updates for SAV for Mac (10, 10.1, and 10.2).  I also tried NAV 11 for Mac, but that did not work either.  All of the updates have been assigned to the distribution center.  Below is the list of files currently on the distribution center. 

-Chris

   6/13/10 9:58 PM    1203717431jtun_asa1011.osx
   6/13/10 9:58 PM    1204063402jtun_esa1010.osx
   6/13/10 9:58 PM    1243920395jtun_symantecproductcatalog.zip
   6/14/10 2:01 AM    1272957346jtun_symantecproductcatalog.zip
   5/20/10 1:04 AM    1274209026jtun_enn01md2.osi
   5/20/10 1:04 AM    1274209026jtun_enn01md2.osx
   5/20/10 1:04 AM    1274209026jtun_enn02md2.osi
   5/20/10 1:04 AM    1274209026jtun_enn02md2.osx
   5/20/10 1:05 AM    1274209026jtun_enn03md2.osi
   5/20/10 1:05 AM    1274209026jtun_enn03md2.osx
   5/20/10 1:04 AM    1274209026jtun_enn04md2.osi
   5/20/10 1:04 AM    1274209026jtun_enn04md2.osx
   5/20/10 1:05 AM    1274209026jtun_enn05md2.osi
   5/20/10 1:05 AM    1274209026jtun_enn05md2.osx
   5/20/10 1:05 AM    1274209026jtun_enn06md2.osi
   5/20/10 1:05 AM    1274209026jtun_enn06md2.osx
   5/20/10 1:04 AM    1274209026jtun_enn07md2.osi
   5/20/10 1:04 AM    1274209026jtun_enn07md2.osx
   5/20/10 1:04 AM    1274209026jtun_enn08md2.osi
   5/20/10 1:04 AM    1274209026jtun_enn08md2.osx
   5/20/10 1:05 AM    1274209026jtun_enn09md2.osi
   5/20/10 1:05 AM    1274209026jtun_enn09md2.osx
   5/20/10 1:05 AM    1274209026jtun_enn10md2.osi
   5/20/10 1:05 AM    1274209026jtun_enn10md2.osx
   5/20/10 1:05 AM    1274209026jtun_enn11md2.osi
   5/20/10 1:05 AM    1274209026jtun_enn11md2.osx
   5/20/10 1:04 AM    1274209026jtun_enn12md2.osi
   5/20/10 1:04 AM    1274209026jtun_enn12md2.osx
   5/20/10 1:05 AM    1274209026jtun_ennfull2.osi
   5/20/10 1:06 AM    1274209026jtun_ennfull2.osx
   6/13/10 11:42 PM    1275660536jtun_enncurd2.osi
   6/13/10 11:42 PM    1275660536jtun_enncurd2.osx
   6/14/10 2:00 AM    1276267666jtun_enncurd2.osi
   6/14/10 2:00 AM    1276267666jtun_enncurd2.osx
   2/9/10 11:05 PM    aspnet_client
   6/14/10 2:01 AM    livetri.zip
   6/13/10 9:58 PM    lua$20product$20catalog_1.2_symalllanguages_livetri.zip
   6/14/10 2:01 AM    lua$20product$20catalog_1.3_symalllanguages_livetri.zip
   6/14/10 2:01 AM    minitri.flg
   5/20/10 1:06 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.apr_symalllanguages_livetri.zip
   5/20/10 1:06 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.aug_symalllanguages_livetri.zip
   6/14/10 2:00 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.curdefs_symalllanguages_livetri.zip
   5/20/10 1:06 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.dec_symalllanguages_livetri.zip
   5/20/10 1:06 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.feb_symalllanguages_livetri.zip
   5/20/10 1:06 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.full_symalllanguages_livetri.zip
   5/20/10 1:06 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.jan_symalllanguages_livetri.zip
   5/20/10 1:06 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.jul_symalllanguages_livetri.zip
   5/20/10 1:06 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.jun_symalllanguages_livetri.zip
   5/20/10 1:06 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.mar_symalllanguages_livetri.zip
   5/20/10 1:06 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.may_symalllanguages_livetri.zip
   5/20/10 1:06 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.nov_symalllanguages_livetri.zip
   5/20/10 1:06 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.oct_symalllanguages_livetri.zip
   5/20/10 1:06 AM    nav$20for$20macintosh$20virus$20defs_microdefsb.sep_symalllanguages_livetri.zip
   6/13/10 9:58 PM    symantec$20antivirus$20for$20macintosh_10.0.0_english_livetri.zip
   6/13/10 9:58 PM    symantec$20antivirus$20for$20macintosh_10.1.0_english_livetri.zip
   6/14/10 2:01 AM    SymantecProductCatalog.zip

[Migration User]

I'm going to set up an LUA server later this morning and let you know what I find.  (I've been wanting to do that anyway :) )

sandra

[Migration User]

Unfortunately, I needed to rebuild my server and that's taking a while.  I had a thought, though, regarding LUA.  If this has been up and running for a while, and I can see that SymantecProductCatalog.zip above says 6/14, but have you done the following to update the Symantec Product Catalog to see if a SEP for Macintosh option is added?

From the LUA User's Guide, P 25:

Updating the My Symantec Product Catalog
If your Symantec product does not appear in the list of available products, you may need to update the Symantec Product Catalog. This will populate the list with the latest available products, which you can then add to your Site List.

To update the Symantec Product Catalog

◆ On the left pane in the My Symantec Products window, under My Symantec Products Tasks, click Update Symantec Product Catalog.

I hope this helps...

sandra

[Migration User]

Sandra,
   I can understand rebuilding a server, it can be an adventure.  Unfortunately I have tried updating the product catalog numerous times over the past month or so with the hope that one day a listing for SEP for Mac would appear!  I went ahead and tried it again just now and there is still nothing listed.  I have not opened a case with support about this yet, but would be more than happy to if needed.  My hope was that posting in the forum would lead to someone pointing out something obvious I had missed.  Let me know what you find out when you get your box rebuilt.

-Chris

[Migration User]

Have installed and have only played with the configuration, am currently downloading content and stlil have further testing to do.  However, this is what I found.

The SEP for Mac content is actually under SEP v. 11.0 English.  I don't think you need to choose SAV for Macintosh (unless you still have SAV clients) or NAV for Macintosh.  Here is what you will want to do.  (I'll be updating the document in the near future.)

- Add Product Symantec Endpoint Protection v. 11.0.  (I chose English only.)  At this point, you cannot choose subcomponents.

- Configure the download, add SEP Endpoint Protection.  Here is where you'll adjust what you actually download.  In my test setup, I am only downloading what I'm noting below.

Behavioral Crimeware Protection and Firewall: Nothing in here pertains to Macintosh.
LiveUpdate: Live Update for Macintosh 5.1.2 English (that's the only thing that showed for me.)
Product Updates: Symantec Endpoint Client Macintosh 11.0.6000 English; Symantec Scheduler for Macintosh 4.0.3 English.  (They're listed near the bottom.  I redacted the list to show the Mac stuff.)
Virus Definitions: Symantec Endpoint Protection for Mac Virus Defs.

- Configure the Distribution schedule and Distribution Center to cover the same as above.

I'm attaching images below so you can see what I mean.  Verify these things are present and checked for you.

I will post more as my testing continues...  My theory is that the big downloads are the same (the .osi and .osx files) and the product-specific files are what are created for individual products.  i.e. you will not be downloading 2 copies of each of the large definition files.

Whew! :)

sandra

[Migration User]

Found the updates!  Thank you very much for your help!!!

-Chris

[Migration User]

I'm glad to have assisted.  I have also extensively reworked the document for setting up LUA to serve SEP for Mac clients, hopefully is clearer and easier to follow... and with the same screenshots as above. =)

Title: 'Using the LiveUpdate Administrator on a PC to download updates for Symantec Endpoint Protection/Symantec AntiVirus 10 for Macintosh clients'
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007152728050998

Thanks,
sandra

[pete]

great work, thumbs up!!

[Migration User]

Thank you, Pete!

sandra

[Migration User]

Sandra,

I am running LUA 2.2.1.3 and I already have Symantec Endpoint Protection v11.0 added to my product catalog for PC's.  When I went to edit my MAC distribution cetner in LUA, I do not see any of the Symantec Endpoint Protection for MAC options:





WITHOUT removing Symantec Endpoint Protection v11.0 from my product catalog and readding it, which would then remove it from all my schedules and distribution centers, is there a way to get these options to appear?

I have already clicked on Update Symantec Product Catalog and that didn't change anything.

Thanks for your help.

[Migration User]

My suggestion was going to be to update the Product Catalog, but you've tried that.  Have you tried upgrading LUA itself to 2.2.2.9 (the newest version)?

sandra

[Migration User]

hey! so I spent around a day and a half setting up my test environment for LUA to manage my mac's.  I just came across this and realized that my version of LUA was out of date.  I tried the upgrade process located here:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008071107132548

but this was proving difficult and it was only a test environment so I just blew away what i had and reinstalled to the newest version (version 2.2.2.9) located here:
http://www.symantec.com/techsupp/home_homeoffice/products/lu/lu/files.html

So if your having issues with downloading/updating Macintosh clients and your version of LUA is 2.2.1 upgrading LUA will probably fix this, assuming that you are not having other issues with your setup.

Paul

[Migration User]

it should be possible to update LUA through the LiveUpdate button in the top right corner.  The instructions you were looking at were to update from a shared folder, so unless LUA is behind an HTTP proxy you really did not need to go through those steps

sandra