Linglom's blog

Introduction

By default, Microsoft Internet Security & Acceleation Server (ISA) will block any connection between internal and external network. If you have Symantec AntiVirus and it needs to update definition (or signature) from internet through ISA, The ISA will block the connection so that the program can’t update the definition.

The error message shows as “LU1814: LiveUpdate could not retrive the update list”.

Step-by-step

To solve the problem, you need to add rule on ISA to allow internal server to download definition from symantec’s liveupdate site.
In this example, I configure on ISA Server 2006.

1. Open ISA Server Management and click on Firewall Policy.
2. Create new access rule. On New Access Rule Wizard, name the rule as you want and click Next.
   
3. On Rule Action, select Allow. Click Next.
   
4. On Protocols, add HTTP. Symantec AntiVirus uses HTTP protocol to update definitions.
   
5. On Access Rule Source, select the internal server that is going to download definition from internet.
   
6. On Access Rule Destination, create new site object pointing to “http://liveupdate.symantecliveupdate.com” and add to the destination.
   
7. On User Sets, leave it to All Users.
   
8. Click Finish to complete creating rule.
   
9. Apply the configuration on ISA by click on Apply.
   
10. Next, open Symantec’s liveupdate. Select Configure on Options menu.
    
11. On LiveUpdate Configuration, click on HTTP tab and set HTTP Proxy Settings to ISA Server name and port.
    
12. Test manual update and now you can update definition through ISA server.
    
13. You can also observe log file on ISA whether ISA allows the update traffic or not.