SEP Small Business 12.1.4

[Migration User]

I'm running SEP 12.1.4 unmanaged. I noticed a month or so ago that it stopped updating. I've tried uninstalling, reinstalling and clearing definitions using this link http://www.symantec.com/business/support/index?page=content&id=HOWTO59193&profileURL=https%3A%2F%2Fsymaccount-profile.symantec.com%2FSSO%2Findex.jsp%3FssoID%3D14226587241400Bys74x7Gd190VB24oiADn0M61zlkngzp8Q9Y.

Here is the message. Any help would be appreciated.

The following Symantec products and components are installed on your computer:

> Symantec Endpoint Protection Client
> SONAR Definitions
> AP Portal List
> Extended File Attributes and Signatures
> Intrusion Prevention Signatures
> Submission Control Thresholds
> Centralized Reputation Settings
> Virus and Spyware Definitions Win64
> Symantec Whitelist
> Virus and Spyware Definitions Win64 (hub)
> Revocation Data

Initializing...
Connecting to liveupdate.symantecliveupdate.com...
Connected to LiveUpdate server successfully.

There are 11 update(s) to be downloaded.
Downloading catalog file (1 of 11) finished.
Downloading catalog file (2 of 11) failed.
Downloading catalog file (3 of 11) failed.
Downloading catalog file (4 of 11) failed.
Downloading catalog file (5 of 11) failed.
Downloading catalog file (6 of 11) failed.
Downloading catalog file (7 of 11) failed.
Downloading catalog file (8 of 11) failed.
Downloading catalog file (9 of 11) failed.
Downloading catalog file (10 of 11) failed.
Downloading catalog file (11 of 11) failed.
Encountered an error while downloading file sepc$20behavior$20and$20security$20heuristics$2012.1$20ru2_microdefsb.curdefs_symalllanguages_livetri.zip.
Encountered an error while downloading file sepc$20srtsp$20settings_12.1$20ru2_symalllanguages_livetri.zip.
Encountered an error while downloading file sepc$20cids$20signatures$2012.1$20ru2_microdefsb.curdefs_symalllanguages_livetri.zip.
Encountered an error while downloading file sepc$20extended$20file$20attributes$20and$20signatures$2012.1$20ru2_microdefsb.curdefs_symalllanguages_livetri.zip.
Encountered an error while downloading file sepc$20submission$20control$20data_12.1$20ru2_symalllanguages_livetri.zip.
Encountered an error while downloading file sepc$20iron$20settings$2012.1$20ru2_microdefsb.curdefs_symalllanguages_livetri.zip.
Encountered an error while downloading file sepc$20virus$20definitions$20win64$20$28x64$29$2012.1$20ru2$20h_microdefsb.curdefs_symalllanguages_livetri.zip.
Encountered an error while downloading file sepc$20iron$20whitelist$2012.1$20ru2_microdefsb.curdefs_symalllanguages_livetri.zip.
Encountered an error while downloading file sepc$20iron$20revocation$20list$2012.1$20ru2_microdefsb.curdefs_symalllanguages_livetri.zip.
Encountered an error while downloading file sepc$20virus$20definitions$20win64$20$28x64$29$2012.1$20ru2$20h_microdefsb.error_symalllanguages_livetri.zip.

Session summary: 0 update(s) available, 0 update(s) installed.
LiveUpdate session is complete.

 

[ℬrίαη]

Defs could be corrupt.

Run the symhelp tool to determine if this is the case:

Download the Symantec Help (SymHelp) diagnostic tool to detect Symantec product issues

Lastly, try updating manually by running the Intelligent Updater file from here:

http://www.symantec.com/security_response/definitions/download/detail.jsp?gid=sep

[Rafeeq]

Do a repair of sep from add or remove programs

[Migration User]

Brian,

SymHelp did find that some defs were corrupt so I ran the Intelligent Updater which finished. When I open SEP now it shows status is OK, but if I try to run updater I get same errors.

 

[ℬrίαη]

It could be LiveUpdate is not functioning correctly. Have you tried a repair on the client?

[Migration User]

I did a repair from Programs and Settings and rebooted, but it didn't make any difference.

I've attached the results from the SymHelp. 

 

Attachment(s)

[CW-CF3ZCY1]__2015-02-02__13-30-11.7z   2.44 MB 1 version

[Rafeeq]

Its unable to download the catalog file so failed to download defs, might be proxy or firewall blocking it,

can you post the lue.log ?

it can be found here

On Windows XP and Windows server 2003:
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\<silo_id>\Data\Lue\Logs

On Windows Vista, Windows 7, and Windows Server 2008:
C:\Program Data\Symantec\Symantec Endpoint Protection\<silo_id>\Data\Lue\Logs

http://www.symantec.com/business/support/index?page=content&id=TECH168602

[Migration User]

I tried to attach it, but it won't take that file type so I tried to zip it and it said It's open.

What service do I need to stop so I can upload it?

[ℬrίαη]

Just make a copy of it

[Migration User]

It won't let me. Says I don't have permissions even though I'm an AD admin and local admin.

[Rafeeq]

can you disable tamper protection and try to get a copy of that file? 

[Migration User]

Got it. Here it is.

Attachment(s)

Log_5.7z   3 KB 1 version

[Rafeeq]

From the log , I see 

* REQUEST_ERROR - error 12030 (0x00002EFE), result API_RECEIVE_RESPONSE. File: sepc$20srtsp$20settings_12.1$20ru2_symalllanguages_livetri.zip

Meaning that connection was terminated, do you have any firewall in place? I know its unmnaged client but even then.

are you able to download all three files, like in this document, just to make sure fw is not blockign anything

How to determine whether your firewall is blocking LiveUpdate

http://www.symantec.com/business/support/index?page=content&id=TECH102059

[Migration User]

Okay, I just setup a laptop on a wifi network and it worked so it's definitely the Sonicwall firewall. I've checked the settings, but I don't have CFS turned on. I'll open a ticket with Sonicwall to help find where it's getting blocked.