SEP LiveUpdate fails to download content via Reverse Proxy - 0x80010732

Products

• Endpoint Protection

Issue/Introduction

Symantec Endpoint Protection (SEP) Linux Agent fails to download content when running LiveUpdate connected to a Symantec Endpoint Protection Manager (SEPM) Reverse Proxy.  In the lux.log, LiveUpdate generated the Transport Return Message: "FAIL - file not found" with a Transport Return Code of 0x80010732.

Example from Lux.log (/opt/Symantec/sdcssagent/AMD/sef/Logs/lux.log)

……
11:45:06.788525 [Server Selection - START]
11:45:06.791989  Result Code: 0x80010830
11:45:06.792013  Result Message: FAIL - failed to select server
11:45:06.792034  [Server - START]
11:45:06.792053   Host ID: {7007012E-74AA-45E5-A6D2-82EF7A14F59B}
11:45:06.792067   Status Code: 1
11:45:06.792081   Status Message: Server was not selected
11:45:06.792097   Transport Return Code: 0x80010732
11:45:06.792111   Transport Return Message: FAIL - file not found
11:45:06.792124   Protocol: HTTP
11:45:06.792138   Hostname: 192.168.0.72
11:45:06.792151   Port: 8014
11:45:06.792164   Path: 
11:45:06.792178   Proxy ID: {00000000-0000-0000-0000-000000000000}
11:45:06.792191   Proxy Bypass: false
11:45:06.792204  [Server - END]
11:45:06.792219  Used proxy list was empty
11:45:06.792232 [Server Selection - END]
……….

Cause

The Liveupdate Policy for the Linux Client is missing the complete URL path (/luproxy) to the SEPM Reverse Proxy.  If /luproxy is missing from the path, it will be evident in the lux.log as the path will be blank.

Environment

Release: 14.3.x

Resolution

Update your LiveUpdate policy for Mac and Linux clients for your desired groups.

1. Within Symantec Endpoint Protection Manager, click Policies > LiveUpdate.
2. On the LiveUpdate Settings tab, double-click the LiveUpdate Settings policy that applies to your desired groups.
3. Select Server Settings under Linux Settings
4. Select Use a specified internal LiveUpdate server and click Add
5. Specify the name "SEPM HTTP LU Proxy," with the corresponding URL: "http://ServerIP:8014/luproxy" or "http://ServerName:8014/luproxy"

 

Note: 

• Where ServerIP or ServerName represents the IP number or name of the server that hosts Symantec Endpoint Protection Manager.
• If the Symantec Endpoint Protection Manager Apache web server uses a different port that 8014, replace 8014 with your actual port number in the above URL.

 

Additional Information

Enabling Mac and Linux clients to download LiveUpdate content using the Apache web server as a reverse proxy
https://knowledge.broadcom.com/external/article/181483

Reverse proxy does not use Endpoint Protection Manager's proxy settings
https://knowledge.broadcom.com/external/article/162038/reverse-proxy-does-not-use-endpoint-prot.html