After July 18th, 2021, LiveUpdate administrator is reporting virus definitions are corrupt when downloading the package to update Symantec Protection Engine (SPE)
In the lua-application.log, located in C:\Program Files (x86)\Symantec\LiveUpdate Administrator\logs, the following sequence of events is observed:
ERROR download.ValidateDownloadHelper - file in update package is too big : 734003200 ERROR download.ValidateDownloadHelper - Package size exceeded max size limit - 1626701980jtun_symdeeplist1.x86 threadpool.LUAThreadPool - Execute: LUA THREAD POOL SIZE: 1 total task count: 1 Active task count: 1 download.LuaSegmentedThreadPool - Execute: LUA SEGMENTED THREAD POOL SIZE: 0 total task count: 1 Active task count: 1 ERROR handler.RequestHandler - Found failed status for file thread: thread result: CORRUPT payload state: CREATED ERROR handler.RequestHandler - java.lang.Exception: Download of update not completed handler.RequestHandler - Updating status of downloadJob : 6 to ---> JOB_FAILURE handler.RequestHandler - ************LUA_DOWNLOAD_CONTENT TRANSFER_END************ download.DownloadUpdateRequest - Download Request Invocation Result : FAILURE
The package for Symantec URL Reputation services has exceeded the maximum size allowed by LiveUpdate administrator.
The package size has been reduced to avoid this behavior, no customer action is required at this time.
Most SPE deployments do not require the DeepSiteURL definition updates. If the SPE clients are not using the URL reputation feature, the LUA server can be configured to provide only the Virus definition updates, which will work around this issue.
To enable downloads for only the virus definition updates:
To avoid errors with the previously existing download schedule, remove the existing schedule by selecting the checkmark next to the download and distribution schedules, and click Delete.
If URL reputation services are required, Symantec support recommends performing the above steps, and in addition upgrading to the 8.2.1 release of SPE. The DeepSite engine is replaced by the WebPulse engine, which no longer requires content updates via LiveUpdate.