The Symantec Endpoint Protection Manager (SEPM) will not update definitions correctly after running LiveUpdate, although LiveUpdate itself returns no error when run from the console and may report that definitions are updated. Further investigation of the system that the SEPM is running on indicates that another software application is listening on TCP port 9090.
The error for this issue will be reported in the SesmLu.log and will appear similar to the following:
07/08 06:50:31 [1bc8:1550] ERROR sesmIPSdef32 SesmLu InternetOpenUrl failedat SesmLu.cpp
07/08 06:50:31 [1bc8:1550] ERROR sesmIPSdef32 SesmLu Failed to notify SESM servlet of new LiveUpdate package.at SesmLu.cpp
07/08 06:50:31 [1bc8:1550] ERROR sesmIPSdef32 SesmLu Failed to notify servlet of new content.at SesmLu.cpp
The SEPM is expected to be listening on port 9090 to full process its definitions. If a conflicting application is using the port instead, this process cannot complete correctly. Although definitions are downloaded, they are not properly inserted into the database.
This issue can be resolved by following one of the solutions listed below:
SEPM version 12.1 RU2. Remote MS SQL Database.
In this instance the conflicting application was a third party log collector tool running on port 9090.