Earlier, only HTTP protocol was supported for LiveUpdate. From Symantec Protection Engine 7.5.3 onwards, you can use FTP protocol to download definitions from the desired (local) server.
To configure FTP in core server mode only
<protocol value=”ftp”/>
<server value=”<FTP server name or IP”/>
<port value=”< Port Number>”/>
<path value=”< Path of the Definitions”/>
To know how to use xmlmodifier, see the “About using XMLModifier in the Core server only mode” topic of the Symantec™ Protection Engine Implementation Guide.