About the types of content that LiveUpdate can provide

Article:HOWTO55176  |  Created: 2011-06-29  |  Updated: 2011-12-16  |  Article URL http://www.symantec.com/docs/HOWTO55176
Article Type
How To


Subject


About the types of content that LiveUpdate can provide

The types of content that LiveUpdate can provide include virus and spyware definitions, Intrusion Prevention System signatures, and product software. To control the content types that your client computers download, you use a LiveUpdate Content policy. To control the content types that the default management server downloads to distribute to clients, you configure the properties settings for the site. If content is selected in a LiveUpdate policy but is not selected in the site properties, that content is not delivered to the clients.

Note:

LiveUpdate updates include definitions and content. It does not include policy updates. Symantec Endpoint Protection Manager updates policies on clients when you assign a new policy to a group or when you edit an existing policy.

Table: Content types that you can configure lists the types of content that you can configure to download to clients in Symantec Endpoint Protection Manager.

Table: Content types that you can configure

Content type

Description

Client updates

Client updates are configured in the site properties and in the Advanced Settings of a LiveUpdate Settings policy. This choice is not configured in a LiveUpdate Content policy.

Client updates are improvements to the installed client software. These updates are usually created to extend the operating system or hardware compatibility, adjust performance issues, or fix product errors. Client updates are released on an as-needed basis. Clients can receive product updates directly from a LiveUpdate server. Managed clients can also receive product updates automatically from Symantec Endpoint Protection Manager.

The Product Update Settings parameter in the Advanced Settings of a LiveUpdate Settings policy lets you control your client software versions. When this setting is disabled, client software can only be manually updated. When the management server downloads and processes patches, it automatically creates a new package. The new package appears in the Client Install Packages pane. You can then select the package, and use the Upgrade Groups with Package feature for your Windows clients.

You must provide manual updates for Mac clients by using a third-party tool or by making the update package available for download on your network.

Virus and Spyware definitions

Separate virus definition packages are available for the x86 and the x64 platforms.

SONAR heuristic signatures

Protects against zero-day attack threats.

TruScan proactive threat scan commercial application list

Includes the legitimate commercial applications that have generated false positives in the past. These are used for backward compatibility when you manage legacy clients.

Intrusion Prevention signatures

Protects against network threats and support the intrusion prevention and detection engines.

Submission Control signatures

Controls the flow of submissions to Symantec Security Response.

Reputation Settings

Includes updates to the reputation data that is used in protection.

Host Integrity templates

Includes the predefined requirements that enforce updated patches and security measures on the client computer. Templates download for the computers that run Windows operating systems and Mac operating systems.

Note:

This option only appears in the Site Properties dialog box when you install Symantec Network Access Control.

Table: Features and the update content that they need lists the features that need updates and the types of content that they need.

Table: Features and the update content that they need

When you install an unmanaged client

When you update, you need to download these types of content

Virus and Spyware Protection

  • Virus and Spyware Definitions

  • SONAR Definitions

    When you configure content types for download in Site Properties, these are called SONAR heuristic signatures.

  • Symantec Whitelist

    When you configure a site to download content, this content type is called TruScan proactive threat scan commercial application list.

  • Revocation Data (downloaded by default, not configurable from Symantec Endpoint Protection Manager)

  • Centralized Reputation Settings

    When you configure content types for download in Site Properties, this content type is called Reputation Settings.

  • Submission control signatures

Virus and Spyware Protection > Download Protection

  • Virus and Spyware Definitions

  • SONAR Definitions

    When you configure content types for download in Site Properties, these are called SONAR heuristic signatures.

  • Symantec Whitelist

    When you configure a site to download content, this content type is called TruScan proactive threat scan commercial application list.

  • Revocation Data (downloaded by default, not configurable from Symantec Endpoint Protection Manager)

  • Centralized Reputation Settings

    When you configure content types for download in Site Properties, this content type is called Reputation Settings.

  • Submission control signatures

  • Intrusion Prevention signatures

    When you select this option to download, it includes updates to both the Intrusion Prevention signatures and the Intrusion Prevention engines.

Virus and Spyware Protection > Outlook Scanner

  • Virus and Spyware Definitions

  • SONAR Definitions

    When you configure content types for download in Site Properties, these are called SONAR heuristic signatures.

  • Symantec Whitelist

    When you configure a site to download content, this content type is called TruScan proactive threat scan commercial application list.

  • Revocation Data (downloaded by default, not configurable from Symantec Endpoint Protection Manager)

  • Centralized Reputation Settings

    When you configure content types for download in Site Properties, this content type is called Reputation Settings.

  • Submission control signatures

Virus and Spyware Protection > Notes Scanner

  • Virus and Spyware Definitions

  • SONAR Definitions

    When you configure content types for download in Site Properties, these are called SONAR heuristic signatures.

  • Symantec Whitelist

    When you configure a site to download content, this content type is called TruScan proactive threat scan commercial application list.

  • Revocation Data (downloaded by default, not configurable from Symantec Endpoint Protection Manager)

  • Centralized Reputation Settings

    When you configure content types for download in Site Properties, this content type is called Reputation Settings.

  • Submission control signatures

Proactive Threat Protection > SONAR

SONAR Definitions

When you configure content types for download in Symantec Endpoint Protection Manager, these are called SONAR heuristic signatures.

Proactive Threat Protection > Application and Device Control

No updates are needed.

Network Threat Protection > Intrusion Prevention

Intrusion Prevention signatures

Note:

When you select this option to download, it includes updates to both the Intrusion Prevention signatures and the Intrusion Prevention engines.

Network Threat Protection > Firewall

No updates are needed.

Network Access Control

Host Integrity content

See Managing content updates

See Configuring the types of content used to update client computers.


Legacy ID



v38877448_v59371754


Article URL http://www.symantec.com/docs/HOWTO55176


Terms of use for this information are found in Legal Notices