Symantec releases signature updates—often multiple times per day—to identify newly discovered malware. Without these updates, your SEP client cannot "see" or block a new virus. A delay of even 24 hours can leave your network vulnerable.
When a SEP client or Management Server initiates a LiveUpdate session, it connects to designated Symantec servers (or internal LiveUpdate servers), downloads the necessary packages, and applies them. symantec endpoint protection update download
For Managed Clients (The Hierarchical Model): In a corporate environment using the Symantec Endpoint Protection Manager (SEPM), the workflow is centralized: Common issues:
For Unmanaged Clients: Standalone installations or small business editions connect directly to Symantec’s public LiveUpdate servers. This is a "pull" mechanism where the client reaches out, checks for versioning, and downloads the delta (the difference between the current and new files). If download fails, review SEPM logs or client