Can we configure manual IP addresses to download LiveUpdate content through internet?
search cancel

Can we configure manual IP addresses to download LiveUpdate content through internet?

book

Article ID: 154503

calendar_today

Updated On:

Products

Endpoint Protection Endpoint Security

Issue/Introduction

What IP addresses should be configured as Firewall and Proxy exceptions to enable LiveUpdate?

LiveUpdate cannot download definitions because server is not reachable. Possible error:

Connection to the LiveUpdate server failed.

Cause

Proxy or Firewall blocks Symantec LiveUpdate server access.

Resolution

Configure exceptions for LiveUpdate using DNS instead of IP address.  Symantec uses a Content Distribution Network of tens of thousands of servers to make new definitions and other content available via LiveUpdate.  IP addresses used by this CDN change, there is no static IP address or range that can be used for configuring firewall rules. Instead of using IP addresses to create firewall rules to permit traffic, rules should allow connections to the following domains:

 
HTTP/HTTPS
  • liveupdate.symantec.com
  • liveupdate.symantecliveupdate.com

Additional Information

For additional URL's required for Symantec Endpoint Protection & Symantec Endpoint Security, please view the link below.

External URLs required for Symantec Endpoint Protection (SEP) and Symantec Endpoint Security (SES)