Endpoint Protection for Mac client erroneously requests proxy credentials

Products

• Endpoint Protection

Issue/Introduction

Symantec Endpoint Protection (SEP) for Mac runs LiveUpdate and prompts for Network Proxy Authentication credentials even if the configured proxy is anonymous.

When LiveUpdate is launched, a dialog box appears requesting user name and password for Network Proxy Authentication:

Environment

• SEP for Mac version 14 or later (managed or unmanaged client)
• Mac OS X 10.9 and later
• Mac system is configured to use a proxy for HTTP(S) connections

Cause

Mac LiveUpdate not correctly interpreting connection errors. This prompt will appear for any failure.

 

Resolution

Symantec is aware of the issue and will update this article when new information is available. You may receive a prompt for proxy credentials if the proxy address/port or LiveUpdate server cannot be reached, or if the proxy is of an unsupported type.

Verify that the LiveUpdate server is accessible by trying to download the following file via a web browser:

http(s)://[server:port]/livetri.zip

If you cannot download this file then troubleshoot your network connection to that server. The zip file should extract to liveupdt.grd, liveupdt.sig, and liveupdt.tri files. If it does not unzip, examine it with a text file viewer; sometimes a proxy or firewall will return a plain text error message.

The default address for Symantec's LiveUpdate server is http(s)://liveupdate.symantec.com or liveupdate.symantecliveupdate.com. If you are using an internal LUA (LiveUpdate Admin) server then use that address and port for the livetri.zip download test. Check LiveUpdate logging to confirm that the correct address and port is being used. 

SEP Mac LiveUpdate supports only HTTP(S) proxies; FTP/SOCKS proxies are not supported. Proxy automatic configuration (via PAC file, etc) is supported.