To block Symantec LiveUpdate you have to create an object for destination Web server or domain.
And put symantecliveupdate.com in this object
Create a new rule that “Deny access”
- On the items tabs, Create an object “Web server or domain“
 - Click on Add button
 
- Select the added object and put it on pattern symantecliveupdate.com
 
- Close the layers and click on Apply button on the table to make the rule in production mode.
 




