How to update content and definitions on the clients

Update content including virus definitions, intrusion prevention signatures, and Host Integrity templates, among others.
By default, the
Symantec Endpoint Protection Manager
downloads content updates from the public Symantec LiveUpdate servers.
Symantec Endpoint Protection
clients then download these updates from the
Symantec Endpoint Protection Manager
. The content includes virus definitions, intrusion prevention signatures, and Host Integrity templates, among others.
Steps to update content on the
Symantec Endpoint Protection
Make sure that the management server has the latest content from LiveUpdate (Recommended)
By default, LiveUpdate runs as part of the
Symantec Endpoint Protection Manager
installation. You may need to run LiveUpdate manually in the following situations:
  • You skipped LiveUpdate during installation.
  • You must run LiveUpdate to download the Host Integrity templates and intrusion prevention signatures.
  • You want to run LiveUpdate before the next scheduled update.
For more information, see:
You can also update content on
Symantec Endpoint Protection Manager
with a .jdb file. See:
Additionally, if you use replication, you can replicate content and policies between the local site and the partner site. See:
Change how client computers get updates (Optional)
By default, Windows client computers get content updates from the management server. Other delivery methods include Group Update Providers, internal LiveUpdate servers, or third-party tool distribution. You may need to change the delivery method to support different client platforms, large numbers of clients, or network limitations. See:
Change the LiveUpdate settings for the management server (Optional)
You can customize the frequency of LiveUpdate sessions, the protection components that are downloaded, and more. See:
Reduce network overloads (Recommended)
If the management server receives too many concurrent requests for full definition packages from the clients, the network may become overloaded. You can mitigate the risk of these overloads, and stop clients from downloading full definitions. See:
Improve performance (Recommended)
To help mitigate the effect of downloads on network bandwidth, download content randomly so that not all clients get updates at the same time. See:
To mitigate the effect of downloads on client computers' performance, you can have the client computers download content updates when the client computers are idle. See:
Let your endpoint users manage their own updates (Optional)
By default, users on the client computer can run LiveUpdate at any time. You can decide how much control to give your users over their content updates. See:
You can also use an Intelligent Updater file on a client computer to update the definitions. See:
Test engine updates before Symantec releases them (Optional)
Symantec releases engine updates on a quarterly basis. You can download the engine updates before they are released using a specific Symantec LiveUpdate server. You can then test the engine content before you roll out the content to your production environment. See: