Symantec Endpoint Protection (SEP) for Linux LiveUpdate (LU) sessions take an extremly long time to finish, due to invalid URLs in liveupdate.conf.
Managed SEP 12.1 for Linux (SEP 14 does not use Jave LiveUpdate or liveupdate.conf)
Multiple connect failures/timeouts in liveupdt.log, until a valid LU URL is tried.
Under some circumstances, multiple erroneous LU URLs may be left behind in liveupdate.conf after configuring policy at the SEP Manager (SEPM). SEP policy management was using unreliable logic to determine when to clear out host entries in Java LiveUpdate's liveupdate.conf file.
As a work-around, the liveupdate.conf file on the SEP Linux client may be edited directly to removed the erroneous LU URL(s):