Symantec Endpoint Protection [SEP] client on MAC OS failed to download definitions from the Liveupdate Administrator [LUA]
Errors in LUX logs
14:33:45.121711 Display Name: Symantec Endpoint Protection Client Mac
14:33:45.121728 PVL: Symantec Endpoint Protection Client Mac_14.3 RU8_SymAllLanguages
14:33:45.121745 Result Code: 0x80010733
14:33:45.121761 Result Message: OK - catalog not available
Errors in Devlux.log
DownloadManager.cpp:732 11/06/24 06:33:45.011988 GMT [INFO] : : : Attempting to download "http://x.x.x.x:7070/clu-prod/symantec$20endpoint$20protection$20client$20mac_14.3$20ru8_symalllanguages_livetri.zip"...
curlTransport.cpp:180 11/06/24 06:33:45.012394 GMT [DEBUG] : : : Encoded URL: http://x.x.x.x:7070/clu-prod/symantec%2420endpoint%2420protection%2420client%2420mac_14.3%2420ru8_symalllanguages_livetri.zip
VersionInfoUtil.cpp:79 11/06/24 06:33:45.012460 GMT [DEBUG] : : : Get the version execution string, '/usr/libexec/PlistBuddy -c 'Print ProductVersion' '/System/Library/CoreServices/SystemVersion.plist''
VersionInfoUtil.cpp:110 11/06/24 06:33:45.022774 GMT [INFO] : : : Version : 14.1
curlTransport.cpp:530 11/06/24 06:33:45.022809 GMT [INFO] : : : using proxy: host=[x.x.x] port=[8080]
curlTransport.cpp:579 11/06/24 06:33:45.022838 GMT [INFO] : : : proxy type=[http]
curlTransport.cpp:858 11/06/24 06:33:45.044724 GMT [WARNING] : : : file not found on server: status=[404]
curlTransport.cpp:695 11/06/24 06:33:45.044846 GMT [ERROR] : : : Failed to download file: error 23, Failed writing header
DownloadManager.cpp:745 11/06/24 06:33:45.044936 GMT [INFO] : : : Download result: 0x80010732
AvailableUpdateSelector.cpp:274 11/06/24 06:33:45.044953 GMT [WARNING] : : : Catalog file not found on server
SessionManager.cpp:600 11/06/24 06:33:45.044965 GMT [INFO] : : : AbortComponent {3F7A569E-7473-4BE1-8695-8FCDFA785C66}
ComponentUpdateInfoImpl.cpp:78 11/06/24 06:33:45.044975 GMT [ERROR] : : : Setting component [Symantec Endpoint Protection Client Mac] status to error code 0x80010733
AvailableUpdateSelector.cpp:187 11/06/24 06:33:45.044985 GMT [INFO] : : : Aborted download of catalog file for Component ID: [{3F7A569E-7473-4BE1-8695-8FCDFA785C66}]
SessionManager.cpp:600 11/06/24 06:33:45.044994 GMT [INFO] : : : AbortComponent {3F7A569E-7473-4BE1-8695-8FCDFA785C66}
ComponentUpdateInfoImpl.cpp:78 11/06/24 06:33:45.045002 GMT [ERROR] : : : Setting component [Symantec Endpoint Protection Client Mac] status to error code 0x80010733
SEP client 14.3 RU8 installed on MAC OS and is configured to get the definitions from LUA
The issue caused of a bad/corrupt settings.dat file
The issue is fixed in SEP 14.3 RU9
Workaround
1. (Optionally maybe even stop the SEP services first)
2. Run this command to remove the corrupted/bad/impacted file (which will get regenerated automatically after restart):
sudo rm -f /Library/Application\ Support/Symantec/Silo/MES/SEF/appdata/settings.dat
3. Restart the SEP services or reboot