Live Update a server with no internet connection

You would need to manually download the updates and install it on the server .....
Live update can update all the symantec products on the system

so there is no option of installing a server which will download the updates and the set the products to fetch the updates from that internal update server ?

the option is available for Norton Anti-Virus....

i know...that's what iv'e wrote...

I ment why didn't they make the tool to be compatible to BE in general ? ? ?

Well thats a good Idea ..You can post that as an enchancement request
ftp://ftp.symantec.com/public/english_us_canada/liveupdate/luadmin.pdf

BE 2010 does not work with LiveUpdate Admin - in theory BE 11.0 and 12.x will work with LiveUpdate Admin however a problem has been identified that  results in servers not receiving updates.

As Symantec would like to see an idea of numbers of custoemrs that would be interested in having LUAdmin (or something similar) working with BE, please use the IDEAS tab at the top of the forums to request it as an Enhancment - with a brief explantion/justification of the requirement - items within the ideas section have a voting system that then allows other forum uses to vote for the idea.

Without something like LiveUpdate Admin - if you media server cannot talk to the internet then your options are manual downlaods only using: http://www.symantec.com/business/support/downloads.jsp?pid=15047

i wrote my IDEA in the idea section - my fingers are crossed.

i can also say that when i opend these IP's at my firewall :

82.166.201.138
206.204.52.31
213.248.114.175


The live update could not download updates, to what address should i open the server to in my Firewall ?

Live update operates over http/https and ftp

• 
  
  LiveUpdate needs access to ports 80 (HTTP), 21 (FTP) and 443 (HTTPS).

• The protocol is TCP.

The file that accesses the Internet is:

LuComServer*.exe

By default, the file is located in C:\Program Files\Symantec\LiveUpdate.

We usually try to connect (in order) to
http://liveupdate.symantecliveupdate.com:80
http://liveupdate.symantec.com:80
ftp://update.symantec.com/opt/content/onramp

When I pinged those addresses , none of them returned the IP addresses you quoted, however, it is possible that we would mirror/round robin the DNS records on the internet so there could be a number of IP adresses involved and it therefore might be difficult to lock access to external IP addresses - bear in mind the connection is always initiated as outbound from media server to LiveUpdate servers so you should not need to configure inbound firewall rules.

Colin thank's for your reply.

The deal is that i can only open IP address in the Firewall - what do you think i should do  ?

if i will open the ports mentiond - i am exposing my server to the world...not something i can do and still sleep well at night.

How you manage your internet security when offset against how you keep software updated is always going to be your choice. Your options for Backup Exec currently are:

 - Manually track when Hotfixes and Servcie packs are released via our website and then download them via a workstaion and install them manually
 - Allow LiveUpdate out through your internet - which more or less means allow internet browsing from your server.