To update clients in a High Security Network that does not have internet access or access to the rest of the network, you have installed a LiveUpdate Administrator 2.x server. You wish to manually update this internal LUA 2.x server from another LUA 2.x server in a DMZ ("external server") using a CDROM, USB drive, flash drive or similar media.
LiveUpdate Administrator 2.x requires access to LiveUpdate source servers on the Internet in order to function as designed. It is possible to use LUA 2.x on an isolated network, but it will require manually copying update files from another LUA 2.x.
Configuring the downloads and the distribution on the external server (DMZ server with Internet access).
Source servers are the locations from which LUA 2.x downloads its content. When you install the LiveUpdate Administrator, the Symantec LiveUpdate server at http://liveupdate.symantecliveupdate.com is added by default. LiveUpdate Administrator 2.x will download updates from the server with the highest priority if updates with the same timestamp are available on all source servers. The failover server list displays similar information for the failover servers associated with the source server. The list of failover servers is in the order that a connection will be attempted in cases where you cannot connect with the source server. You can change the order of the failover servers by clicking Edit , and then selecting the failover server to move up or down in the list.
Then you need to configure also a distribution on that server.
Configuring Distribution Centers
Before creating Distribution Centers (DCs), we need to create a user account that will only have permission to the folder to which the content will be downloaded.
NOTE: to add or change distribution options, you must be logged into the LUA 2.x server as an administrator.
Under the Configure tab, click the Distribution Centers tab.
NOTE: the "Default Product Distribution Center" will distribute content via HTTP to a folder local to the LUA 2.x server: If you choose the default install path, content would be distributed to the \Program Files\Symantec\LiveUpdate Administrator\clu-prod folder
Each time that you update the Symantec Product Catalog on the external server, you need to copy the file SymantecProductCatalog.zip from the external server and put it in the same folder in the internal server, the folder is
%systemdrive%\Documents & Settings\All Users\Application Data\Symantec\LiveUpdate Administrator\Downloads
After that you can update the product catalog on the internal server.
In the internal server you need to create a folder that can be name RecentDownloads share this folder with the defaults permissions and the same name RecentDownloads
Then with the distribution process finished on the external server you need to copy all the content from the folder
%systemdrive%\Program Files\Symantec\LiveUpdate Administrator\clu-prod
and put that content copied from the external server folder to the RecentDownloads folder, the one that was created and shared before.
Then you can configure the download on the internal server and is where the procedure change, during the download definition you need to specify as the source server the localhost and use the UNC instead of a protocol
Configuring the Source Server
11. Finish the distribution server setup by clicking Apply then OK.
"External server": One LiveUpdate Administrator 2.x server which can access the Internet from a DMZ
"Internal server": One LiveUpdate Administrator 2.x server on a high security network (sometimes called an "airlocked" network) that is completely isolated (no access) from the internet and from the DMZ network
(For networks where the Internal server can directly access the External server, please see Configuring LiveUpdate Administrator (LUA) to download updates from another LUA Server)
Subscribing will provide email updates when this Article is updated. Login is required.
Thanks for your feedback. Let us know if you have additional comments below. (requires login)
This will clear the history and restart the chat.