To disable live update, there are two locations where the PolicyLiveUpdate key is kept:
32-bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\VIP Access Client]
64-bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\VIP Access Client]
Modify the value to disable\enable.