Symantec Endpoint Protection Integration Component 6.0 SP1 Release Notes

Article:DOC1614  |  Created: 2008-06-02  |  Updated: 2008-06-02  |  Article URL http://www.symantec.com/docs/DOC1614
Article Type
Documentation


Description



Question
What do I need to know about Symantec Endpoint Protection Integration Component 6.0 SP1?

Answer

Symantec Endpoint Protection Integration Component 6.0 SP1

Release Notes

Introduction

Features in this Release

Known Issues in this Release

Introduction

Symantec™ Endpoint Protection Integration Component integrates the broad security capabilities of Symantec Endpoint Protection with the management strength of Altiris®, now part of Symantec. This lets you use automated Symantec Endpoint Protection features from the Altiris Console such as client installation, migration and repair, operation reporting, and task execution for Symantec Endpoint Protection clients.

New Features in this Release

The following are featured in this release:

Support for multilple client software installtion profiles

You can configure different installation profiles for delivering the Symantec Endpoint Protection Client to specified collections of computers. You can create up to five different profiles for delivering the 32-bit client and up to five different profiles for delivering the 64-bit client.

Installation and Upgrade

Prerequisites

To install and use Symantec Endpoint Protection Integration Component, you must first install:

  • Altiris® Notification Server™ 6.0 SP3 
    For information about installing the Notification Server, see Installation in the Altiris® Notification Server™ Help at http://www.altiris.com/Support/Documentation.aspx.
  • Symantec Endpoint Protection Manager 11 with SQL Server
    For information about installing Symantec Endpoint Protection Manager, see the Installation Guide for Symantec™ Endpoint Protection and Symantec™ Network Access Control that accompanies Symantec Endpoint Protection.

When setting up your environment, see the topic, Planning your Integrated Environment's Architecture in the Symantec Endpoint Protection Integration Component Help at http://www.altiris.com/Support/Documentation.aspx.

Installation

Install Symantec Endpoint Protection Integration Component from the Altiris Console's Solution Center.

Note: Before upgrading to Service Pack 1, it is adviced that you create a copies of your Symantec 32-bit and 64-bit Setup.exe installers stored on the Notification Server. The default directory path is C:\Program Files\Altiris\Notification Server\NSCap\Bin\Win32\X86\ConnectSep, and  C:\Program Files\Altiris\Notification Server\NSCap\Bin\Win64\X64\ConnectSep. These directories and there contents will be overwritten during upgrade. Following upgrade the Setup.exe files must be replaced.

  1. On the Notification Server computer, start the Altiris Console by selecting Start > Programs > Altiris > Altiris Console.
  2. Select the Configure menu, and then select Solution Center.
  3. In the Available Solutions tab view, click the Segments button.
  4. Expand the Components list.
  5. Select Symantec Endpoint Protection Integration Component.
  6. Click Start

The Solution Center will install Symantec Endpoint Protection Integration Component and the following dependent software (if needed):

  • Altiris Task Management 6.0
    Altiris Report Pack for Task Server
    Altiris Task Server Language Pack
    Altiris Task Server Documentation
  • Altiris Console 6.5
  • Altiris Connector Solution 6.5
    Altiris Connector Solution Data Integration Component
    Altiris Connector Solution Data Integration Component Extensions
    Altiris Connector Solution Event Integration Component
    Altiris Connector Solution User Interface Integration Component
    Altiris Connector Solution Documentation 
  • Symantec Endpoint Protection Integration Component 6.0
    Report Pack for Symantec Endpoint Protection Integration Component
    Symantec Endpoint Protection Integration Component Documentation

Known Issues in this Release

The following are unresolved issues in this release. For more information about an issue, click the Article ID in the right column.

Known Issue Article ID
Quick Scan for Viruses and Security Risks task is not working on Vista Computers
38953
Quick Scan task on Windows 2000 computers must be run as specific user
38952
Repair Symantec EP Client task may require a restart to restore system tray icon
38954
Issue with sepProductCode GUID in 64-bit Symantec EP Client Uninstall task
38956

Things to Know

The following are things to know about in this release.

Things to Know
Embedded Sybase Database is not supported by the Integration Component
The embedded Sybase database included with Symantec Endpoint Protection Manager is not supported by the Symantec Endpoint Protection Integration Component. Only SQL Server 2000 or SQL Server 2005 databases are supported.
Make sure client computers are managed by Altiris before rolling out the Symantec Endpoint Protection Client installation packages
To use Symantec Endpoint Protection Integration Component functionality, you must make sure that your client computers are managed by Altiris before you install the Symantec Endpoint Protection Client package. Client computers must have the Altiris Agent installed on them to be managed by Altiris.

If a computer on the network is not managed by Altiris, it is still visible in one of the collections: All 32-Bit Windows Computers without Latest Symantec EP Client or All 64-Bit Windows Computers without Latest Symantec EP Client. These collections are used by the Symantec EP 32- and 64-bit Client installation package; therefore, it is possible to inadvertently attempt to install the Symantec Endpoint Protection Client package to computers that are not managed by Altiris. This results in a failed installation attempt of the client.

Before rolling out the Symantec Endpoint Protection Client installation package, you can verify that computers are managed with the Altiris Agent first by looking at the Is Managed column in the collections All 32-Bit Windows Computers without Latest Symantec EP Client and All 64-Bit Windows Computers without Latest Symantec EP Client.

Instructions for discovering computers, rolling out the Altiris Agent, and rolling out the Symantec Endpoint Protection Client procedures are provided in the Setting up Symantec Endpoint Protection Integration Component chapter of the Symantec Endpoint Protection Integration Component 6.0 Help.

You must copy the Symantec Endpoint Protection Client installer to the Notification Server
Before you push out the Symantec Endpoint Protection Client installation packages to your client computers, you must copy the installer file from the Symantec Endpoint Protection Manager to a location on the Notification Server computer's directory. This location is: C:\Program Files\Altiris\Notification Server\NSCap\Bin\( "Win32" or "Win64")\X86\ConnectSEP. The file is a Setup.exe file that is created using the Symantec Endpoint Protection Manager.

You can automatically export the client installer from the Symantec Endpoint Protection Manager to the Notification Server directory. When you do this, Symantec Endpoint Protection Manager automatically exports the Setup.exe file into a unique sub-folder. This sub-folder is supported by the Symantec Endpoint Protection Integration Component and no adjustment is needed.

An explanation of performing this procedure is provided in the Setting up Symantec Endpoint Protection Integration Component chapter of the Symantec Endpoint Protection Integration Component 6.0 Help.

Multiple file Symantec Endpoint Protection Client installers not supported
When creating Symantec Endpoint Protection Client installation packages, using Symantec Endpoint Protection Manager, you have the option to create either a single file installer package or a multiple file installer package. Multiple file installer packages are not supported by Symantec Endpoint Protection Integration Component.
Unattended Symantec Endpoint Protection Client installers not recommended
The Symantec Endpoint Protection Manager Deployment and Migration Wizard provides the option to create either an unattended client installer or a silent client installer. We recommend that you use the silent client installer option when creating installation packages intended to be deployed with Altiris.
Delete old client installers before updating the Symantec Endpoint Protection Client installer package on your Notification Server
To deploy Symantec Endpoint Protection Clients from the Notification Server, the client installation package must first reside within the C:\Program Files\Altiris\Notification Server\NSCap\Bin\( "Win32" or "Win64")\X86\ConnectSEP folder on the Notification Server computer.

When automatically exporting this package from Symantec Endpoint Protection Manager, this package is placed in a unique subfolder that is supported. To update this package, first delete the old package and its unique subfolder before exporting the new package to the Notification Server. This ensures that Symantec Endpoint Protection Integration Component locates and deploys the correct Symantec Endpoint Protection Client Installer.

You must rollout Task Manager agents to your client computers
There are two Task Manager agents that must be installed on your client computers to use Symantec Endpoint Protection Integration Component functionality. These agent's rollout policies must be manually enabled and designated to your client computers.

The task server agent installation policies do not include 64-bit collections by default. Therefore, if you are managing 64-bit client computers in your environment, you must add 64-bit Windows Computers collections to the agent installation policies before you roll out the task server agent installation packages.

An explanation of this procedure is provided in the Setting up Symantec Endpoint Protection Integration Component chapter of the Symantec Endpoint Protection Integration Component 6.0 Help.

Symantec Endpoint Protection Client Install will uninstall McAfee VirusScan and TrendMicro OfficeScan

The Symantec Endpoint Protection Client Install package rolled out from Symantec Endpoint Protection Integration Component automatically uninstalls any of the following software from your client computers:

  • McAfee* VirusScan* 8.0
  • McAfee* VirusScan* 8.5
  • TrendMicro* OfficeScan* 7.0
  • TrendMicro* OfficeScan* 7.5
Password Protected Client Uninstalls not supported

After the client installer has been installed, there is an option within Symantec Endpoint Protection Manager to turn on password protection for the clients at a group level. If password protection is enabled, uninstalling clients using the Symantec Endpoint Protection Integration Component will fail. To workaround this issue, disable your password protection on the group before attempting to uninstall your Symantec Endpoint Protection Clients.

Additional Documentation

Symantec Endpoint Protection Integration Component product documentation is available in Adobe Acrobat* (.pdf) format. To view documentation in .pdf format, use Adobe Acrobat Reader (available at: http://www.adobe.com/products/acrobat/readstep2.html).

By default, documentation files are installed in the following directory on the Altiris® Notification Server™ computer:

C:\Program Files\Altiris\Notification Server\NSCap\Help.

The following documentation is provided:

  • Symantec Endpoint Protection Integration Component 6.0 SP1 Help- SEPIntegrationHelp.pdf

To access documentation in the Altiris Console, go to Help > Index.



Legacy ID



41651


Article URL http://www.symantec.com/docs/DOC1614


Terms of use for this information are found in Legal Notices