Symantec Endpoint Protection (SEP) for Linux managed client does not update virus definition by LiveUpdate. When you run LiveUpdate manually, following message appears.
#/opt/Symantec/symantec_antivirus/sav liveupdate -u
This client is not allowed to start LiveUpdate.
SEP for Linux 14.3 MP1 (14.3.1169.0100) and earlier.
SEP License is expired.
Activate valid SEP license on Symantec Endpoint Protection Manager (SEPM) that manages SEP for Linux client.
For information on how to update license, see Activating or importing your Symantec Endpoint Protection product license.