Use the LiveUpdate Administrator 2.x to download updates for Symantec Endpoint Protection for Linux

Products

Endpoint Protection

Issue/Introduction

Set up an internal LiveUpdate Administrator server to download updates and virus definitions for Symantec Endpoint Protection for Linux (SEP for Linux or SEPFL) clients.

Resolution

LiveUpdate Administrator

Since there is no centralized management server for SEPFL, many users use the LiveUpdate Administrator (LUA) in their environment to update client definitions.
If it is necessary to assist in setting up LUA follow these steps:

Remember that there are four required areas to set up for definitions in LUA 2.x.
These four areas are:

Configure > My Symantec Products Set the list of Symantec Products in the environment
Configure > Distribution Centers > Product List Set the list of Symantec products a particular distribution center provides updates for.
Download & Distribute > Download Schedule Set a schedule to download the Linux definitions to the LUA
Download & Distribute > Distribution Schedule Set a schedule to distribute the Linux definitions to the distribution centers

To update the LUA 2.x Server's Symantec Product Catalog

Select the Configure button in the menu bar.
On the left pane in the MySymantec Products window, under MySymantec Products Tasks, click Update Symantec Product Catalog

To add the SEPFL product to the product list

Select Configure in the menu bar.
On the MySymantec Products window, click Add New Products.
Select Symantec Endpoint Protection
Scroll down to view the list of available SEP products and enable the versions and languages appropriate for your environment.
- For example: Symantec Endpoint Protection 14.3 English
Click OK.

To create a new download schedule

On the Download & Distribute tab, in the Schedules window, click Add Download.
In the Add Download Schedule box, enter the following:
- Download schedule name A descriptive name for this schedule.
- Status Enabled or Disabled
- Description Enter a description for this schedule.
In the "Select Products" box, click Add.

You can check the full product family to get all definition sets, including Linux definitions, OR

Click the + symbol next to the product name to expand the list of available updates to download
Click the + symbol again next to Content Updates to get the full list of virus definition content updates:
- SEP 14.3 MP1 and earlier: Check the box next to Virus and Spyware Definitions for Linux
- SEP 14.3 RU1 and later: Check the box next to Client - SymPlatform Definitions (Linux) or Client - SymPlatform Definitions TCP (Linux) - depending on if you're using Total Cloud Protection

After making your selection(s):

Select the test status that you want to assign to the schedule.
By default, the test status is set to Skip Test. Set the status to Must Test to test the updates before you publish them.
Under Set Schedule, choose the appropriate frequency for the virus definition content updates (on a time, Daily, Weekly, Monthly or once)
In the Select Schedule box, set the download schedule.
Click OK to save the schedule, or click Cancel to cancel this action.
To run a manual download request that is based on an existing schedule. In the right pane, under Schedules, select an existing Download Schedule, and then click Run Now.

Scheduling Distribution:
After you've downloaded your updates, they can be sent to either a testing distribution server, or published to a production distribution server where they can be downloaded by your LiveUpdate clients. When you add a distribution schedule, you also select the products and components that you want to associate with the schedule. This list of products and components is compared with the updates in the Manage Updates folder. Any revisions that are not already published will then be published in the current distribution session.

Note: The added products must also be added to the distribution center/s. This is accomplished through Configure > Distribution Centers, then edit an existing distribution center to add to the Product List.

To add a new distribution schedule

On the Download & Distribute tab, in the Schedules window, click Add Distribution.
In the Add Distribution Schedule box, enter the following:
- Distribution Schedule name
- Status, either Enabled or Disabled
- Description
Select the products and components for which updates can be distributed by clicking Add.
In the "Select products to be added" window, select the product or products you want to add to this distribution schedule, and then click Add.
In the "Select Product Components" box, select the components that you want to include in the distribution schedule.
Click the component name and click Add.
- Or select all components by clicking Add All.
In the "Distribute Content To" box, select the distribution center type, Testing, Production, or both.
Select the Distribution Centers. You can select all Distribution Centers, or a subset of the centers.
Select a "distribution schedule."
Click OK to save the schedule or click Cancel to cancel this action.

To set up clients to download updates from the internal LiveUpdate server

For Managed SEP for Linux Clients

Within the SEPM, choose Policies in the left pane.
Under View Policies, highlight LiveUpdate.
Either edit the pre existing LiveUpdate policy that assigned to the group to which your Linux clients belong or create a new policy under Tasks >Add a LiveUpdate Settings Policy..., to be assigned after the policy is saved.
In the new window that appears, click on Server Settings.
Ensure that Use a LiveUpdate server is checked, select the button next to Use a specified internal LiveUpdate server, then choose Add...
Fill in the following information:
- Server Name: A name to identify the LUA server. This is not the path from which clients update.
- Description (optional): More information on the LUA server.
- URL: The URL must appear as an HTTP or FTP path, not the local or network path to the folder on your LiveUpdate Server. For LUA, the default production distribution center for LUA 2.2 or higher would be: (server IP address):7070/clu-prod
- Example: 10.0.0.1:7070/clu-prod
You can confirm by looking in the LUA console under Configure, then Client Settings.
- NOTE: LUA by default uses a separate web server; if you are using a Windows IIS website to serve Linux updates, be sure to register all extensions with the MIME types list.
  - User name or Password: only needed if your server requires these for access.
Click OK, then OK again to save the changes. If this is a new policy, you will be asked to assign the policy to a group; click on Yes, then assign it to the group containing the Linux clients.
Linux clients will get the updated policy depending on communication settings and frequency of heartbeat. You can view the Policy Serial Number by looking under Management.