Lucoms~1.exe fails at client workstation when liveupdate

ISA Server 2004 2 nics
Internal network running servers - all W2003SP1
Antivirus Server - Symantec Corporate 10

During installation the client installation hangs because the lucoms~1.exe 
at the client workstation cannot get out through the ISA 2004 server.  We had 
no problems with versions 9 and below.  

Here is the symantec website posting:
Installation of Symantec AntiVirus Corporate Edition 10.x stops at 
"Installing LiveUpdate" when using Microsoft ISA Server 2004 proxy 

Situation:
You install Symantec AntiVirus 10.x or Symantec Client Security 3.x while 
you are connected through a Microsoft Internet Security and Acceleration 
(ISA) Server 2004 proxy server. The installation stops at the message 
"Installing LiveUpdate."

Solution:
Symantec is investigating this problem to determine a solution. This 
document will be updated when new information or a solution is available. 


To work around the problem, set an exclusion for Lucoms~1.exe on the 
Microsoft ISA Server 2004.
To learn how to set exclusions on the Microsoft ISA Server 2004, see 
Microsoft's documentation on the Microsoft ISA Server home page.


How is this accomplished?

That depends on what they mean by "an exclusion".  That could mean
anything,...exclusion from what?  Exclusion from authentication (use
anonymous)?,...exclusion from the Firewall Service?  I guess someone at
Symantec needs to rewrite the article so that it is actually usefull.  If I
knew what they were meaning, and maybe more importantly "why" they think
that would work I might be able to help.

-- 
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
 http://www.**--****.com/ 

Microsoft Internet Security & Acceleration Server: Guidance
 http://www.**--****.com/ 
 http://www.**--****.com/ 

Microsoft Internet Security & Acceleration Server: Partners
 http://www.**--****.com/ 
-----------------------------------------------------

I am having the same problem upgrading from 9.0 to 10.02.
I've been told by Symantec the same thing. They sent me below instructions. 
I don't know if it works or not. Let me know if you finally figure it out a 
way, I have not....

1.  Remove the ISA client from the machine being installed to.  This worked 
even when the machine could no longer access the internet.  (Obviously, this 
is not an ideal solution in all cases.)

2. On the ISA server, bind the application "lucoms~1.exe" to a proxy so 
clients know to let that process have internet access.  A quick and dirty 
"how to" of how this (on the ISA server):
- select Configuration
- select General
- (on the right hand side of the screen) select Define Client Firewall 
Settings
- click the tab for Application Settings
- click the New button
- for Application Name entry enter "lucoms~1.exe" (without the quotation 
marks)
- for the Key entry, choose the drop down entry that says "proxy bind IP"
- click OK 
- enter a value of "1"
- click OK (again)
After this, customer will need to get the settings from the server to the 
client, I am not sure how ISA server does this.   (In my case the customer 
was uninstalling the client and reinstalling it to force the settings change 
immediately, but presumably ISA has some provision to update the client 
settings eventually from the server.)   

instructions.
a
worked
this

But have you tried just disabling the Firewall Client,...install
Symantec,..then renable the Firewall Client?  If that doesn't work, then
remove the FWC,...install Symantec,...reinstall the FWC.

I always use the AV Server to push the AV Client out to the clients,...I
don't sit at each individual machine and install it interactively.  I never
had any trouble with it except for Exchange,...with Exchange you have to do
it off the CD, pick Custom Install and *not* install the Email tools part of
the AV Client.

-- 
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
 http://www.**--****.com/ 

Microsoft Internet Security & Acceleration Server: Guidance
 http://www.**--****.com/ 
 http://www.**--****.com/ 

Microsoft Internet Security & Acceleration Server: Partners
 http://www.**--****.com/ 

Deployment Guidelines for ISA Server 2004 Enterprise Edition
 http://www.**--****.com/ 
-----------------------------------------------------

The client I was trying on had the firewall disabled but it didn't install 
anyway.
I found below link in the Symantec support that may explain the problem 
since we do use ISA server as well.

 http://www.**--****.com/ %20AntiVirus%20Corporate%20Edition&ver=10.0&src=ent&pcode=sav_ce&dtype=corp&svy=&prev=&miniver=sav_ce_10

We use SMS to push out the clients instead of SCC.

After talking to Symantec tech. support, they made me remove the LiveUpdate 
and install the latest version 3.0. After that installation went fine.  Below 
is the link to the newest liveupdate that worked for me.

 http://www.**--****.com/ %20AntiVirus%20Corporate%20Edition&ver=10.0&osv=&osv_lvl=&seg=

Ok, sounds good.

-- 
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com





LiveUpdate
Below
 http://www.**--****.com/ %20AntiVirus%20Corporate%20Edition&ver=10.0&osv=&osv_lvl=&seg=




out
(Obviously,
never
do
part of
 http://www.**--****.com/