If I run it again after a successful download, it will always say it's up to date.
I don't think it is an issue of getting the virus definition. Well, first of all - this site is really not a substitute for the Symantec's techsupport.
As a best practice, ensure that the SEPM is upgraded to the very latest release of Symantec Endpoint Protection 12.1.
The issue causing the update issue may be resolved by the improved processing and enhanced features available in a software version later than what is running.
In most Symantec Endpoint Protection (SEP) deployments, the Endpoint Protection Manager will download and distribute materials to all of its Windows clients efficiently.
For more information, see How to update content and definitions on the clients and Downloading content from Live Update to the Endpoint Protection Manager.
In certain environments, you may want to download updates from an internal Live Update server rather than obtain updates from the Internet source servers.
Live Update Administrator 2.x may be preferable in: If you configure sites on your network for replication from another site, you can configure content updates (for example, Virus and Spyware Definitions) in the database of the primary site to replicate as part of the database.
These clients are configured to receive their updates from their Symantec Endpoint Protection Manager (SEPM).
When you configure a site to download updates, one or more management servers download the updatesnd places the updates in the database.
The Endpoint Protection Manager then uses these definitions to distribute updates to clients.
If you have a support contract with them - I really suggest you contact them instead.
This document explains how to update Symantec Endpoint Protection definitions by running Live Update.
TEM managed clients should receive updates automatically from the server.
If a client is not receiving updates automatically, follow this process.
Windows Live Update is called by the Symantec Endpoint Protection Manager and is responsible for downloading new content from a Live Update server.
How to determine the server that Live Update is attempting to connect to: Progress Update: DOWNLOAD_FILE_START: URL: " Estimated Size: 0, Destination Folder: "C:\Program Data\Symantec\Live Update\Downloads" Progress Update: DOWNLOAD_FILE_FINISH: - NOTE - URL: " Full Download Path: "C:\Program Data\Symantec\Live Update\Downloads\liveupdate_184.108.40.206_english_livetri.zip" HR: 0x802A0045 EVENT - SERVER SELECTION FAILED EVENT - Live Update failed to connect to server .50 at path via a HTTP connection.
gid=sep Download the definitions for Symantec Endpoint Protection Manager 12.1 (format).
File may be saved as .zip, please rename the file to when the download is complete.