Downloading content from LiveUpdate to the
Symantec Endpoint Protection Manager

When you configure the management server to download LiveUpdate content, you have to make a number of decisions. When you download content to
Symantec Endpoint Protection Manager
, you download the content for all the management servers in the site.
Decisions to make about downloading content
Decisions about content downloads
Decision
Description
What LiveUpdate server should serve the content to the site?
You can specify either an external Symantec LiveUpdate server (recommended), or one or more internal LiveUpdate servers that have previously been installed and configured.
You should not install
Symantec Endpoint Protection Manager
and an internal LiveUpdate server on the same physical hardware or virtual machine. Installation on the same computer can result in significant server performance problems.
If you decide to use one or more internal LiveUpdate servers, you may want to add the Symantec public LiveUpdate server as the last entry. If your clients cannot reach any server on the list, then they are still able to update from the Symantec LiveUpdate server.
To continue using an internal LiveUpdate server, you should upgrade to the latest version of LiveUpdate Administrator.
How many content revisions should the site store?
In version 12.1.6 and later, the management server stores only the most recent full content package, plus incremental deltas for as many revisions as you specify here. This approach reduces the disk space that is required to store multiple content revisions on the server.
The number of clients you select during the
Symantec Endpoint Protection Manager
installation defines the number of revisions the server stores.
For each LiveUpdate content type, the default values are as follows:
For 14:
  • If you do not check
    Management server will manage fewer than 500 clients
    ,
    Symantec Endpoint Protection Manager
    stores 21 revisions.
  • If you check
    Management server will manage fewer than 500 clients
    ,
    Symantec Endpoint Protection Manager
    stores 90 revisions.
For 12.1.6, or for upgrades to 14:
  • If you select fewer than 100 clients,
    Symantec Endpoint Protection Manager
    stores 12 revisions.
  • If you select 100 to 500 clients,
    Symantec Endpoint Protection Manager
    stores 21 revisions.
  • If you select 500 to 1,000 clients,
    Symantec Endpoint Protection Manager
    stores 42 revisions.
  • If you select more than 1,000 clients, then
    Symantec Endpoint Protection Manager
    stores 90 revisions.
In most instances during an upgrade, the installation increases the number of revisions to match these new defaults. This increase occurs if the number of revisions you had before the upgrade is less than the new minimum default, based on the above criteria.
How often should my site check for LiveUpdate content updates?
The default schedule of having
Symantec Endpoint Protection Manager
run LiveUpdate every four hours is a best practice.
What operating systems am I downloading content to?
LiveUpdate only downloads the content for the specified operating systems.
What content types should I download to the site and to the clients?
Make sure that the site downloads all content updates that are specified in your client LiveUpdate Content policies.
What languages should be downloaded for product updates?
This setting applies to product updates only; the content updates are downloaded automatically for all languages.
What content size should be downloaded for definitions?
Version 14 standard and embedded/VDI clients use a reduced-size set of definitions (only the latest) that is cloud-enabled. Scans on these clients automatically use the extended definitions set in the cloud.
14 also includes a dark network client that downloads the entire set of definitions.
12.1.6.x embedded/VDI clients require legacy reduced-size content.
Your management server must download the correct content for the client types in your network. If the management server does not download the content that your installed clients require, the clients cannot get updates from the management server.
Should I test engine updates before they are released?
For large organizations, you should test the new engine updates and definitions before they are rolled out to all client computers. You want to test new engine updates with the minimal amount of disruption and downtime.
Downloading content from a LiveUpdate server to the
Symantec Endpoint Protection Manager
When you download content to a management server, you download it for all the management servers within the site.
  1. To configure a site to download content
  2. In the console, click
    Admin
    >
    Servers
    .
  3. Under
    Servers
    , right-click
    Local Site
    , and then click
    Edit Site Properties
    .
  4. On the
    LiveUpdate
    tab, make choices from the following available options.
  5. Under
    LiveUpdate Source Servers
    , click
    Edit Source Servers
    and then inspect the current LiveUpdate server that is used to update the management server. This server is the Symantec LiveUpdate server by default. Then do one of the following:
    • To use the existing LiveUpdate Source server, click
      OK
      .
    • To use an internal LiveUpdate server, click
      Use a specified internal LiveUpdate server
      and then click
      Add
      .
    If you selected
    Use a specified internal LiveUpdate server
    , in the
    Add LiveUpdate Server
    dialog box, complete the boxes with the information that identifies the LiveUpdate server, and then click
    OK
    .
    You can add more than one server for failover purposes. If one server goes offline, the other server provides support. You can also add the Symantec public LiveUpdate server as the last server in the list. If you add the public server, use
    http://liveupdate.symantecliveupdate.com
    as the URL.
    If you use a UNC server, then LiveUpdate requires that you use the domain or workgroup as part of the user name.
    If the computer is in a domain, use the format
    domain_name
    \
    user_name
    .
    If the computer is in a workgroup, use the format
    computer_name
    \
    user_name
    .
    In the
    LiveUpdate Servers
    dialog box, click
    OK
    .
  6. Under
    Disk Space Management for Downloads
    , type the number of LiveUpdate content revisions to keep.
  7. In the
    Download Schedule
    group box, click
    Edit Schedule
    , set the options for how often the server should check for updates. Click
    OK
    .
  8. Under
    Platforms to Download
    , click
    Change Platforms
    and then inspect the platforms list. Uncheck the platforms that you do not want to download content to.
  9. Under
    Content Types to Download
    , inspect the list of update types that are downloaded.
    To add or delete an update type, click
    Change Selection
    , modify the list, and then click
    OK
    .
    The list should match the list of content types that you include in the LiveUpdate Content policy for your client computers.
  10. Under
    Content to Download for Client Types
    , decide whether to download and store content for standard and embedded/VDI clients or dark network clients. You should also download and store reduced-size content or standard-size content if you run 12.1.x clients in your network.
    You must download content for the client types in your network. If you do not download the content that your installed clients require, the clients cannot get updates from the management server.
    To modify the setting, click
    Change Selection
    , modify the selection, and then click
    OK
    .
  11. Under
    Languages to Download
    , inspect the list of languages of the update types that are downloaded.
    To add or delete a language, click
    Change Selection
    , modify the list, and then click
    OK
    .
  12. Click
    OK
    to save your selections and close the window.