When should LiveUpdate Administrator (LUA) be used to manage Symantec product and content updates in an environment?
LiveUpdate Administrator (LUA) creates a local repository of the content and product updates available on the public LiveUpdate (LU) servers. Under the right circumstances, LUA can be used to minimize the amount of external bandwidth needed to update Symantec products in large, highly centralized networks. The main reasons for installing LUA are:
For environments where content updates must be tested before use in production, LUA downloads can be configured to block new content from being distributed to production distribution centers until the content has been tested. Any downloads marked "Must Test" cannot be distributed to production distribution centers until the content is manually marked as Passed.
Note: Symantec Endpoint Protection Manager (SEPM) has this ability built-in through the LiveUpdate Content Policy.
LUA can lower the amount of external bandwidth used to download updates for unmanaged Symantec products in certain circumstances. Since LUA downloads all available updates for each Product Version Language (PVL) it's configured for, bandwidth savings will depend on the size of the average update downloaded by the clients, the number of clients using that update, and the amount of data LUA has to download to supply the updates. Use the following guidelines for determining if LUA will lower external bandwidth usage in your environment:
LUA can be configured as a second source for updates for managed Symantec products such as SEP or Symantec Mail Security for Microsoft Exchange (SMSMSE). Use the guidance in the above Bandwidth saving section to determine if your environment would generate less external bandwidth using LUA or public LU.
LUA can be used to limit the amount of computers accessing the public LU servers in networks where external Internet access is tightly controlled. The same functionality can be provided through a management server like Symantec Endpoint Protection Manager (SEPM) for managed products.
Read How to distribute definition content from a LiveUpdate Administrator 2.x (LUA 2.x) server to an isolated network for more information on distributing Symantec updates to an air gap network.
For more information on LUA, see Best Practices for LiveUpdate Administrator (LUA) 2.x.