Distributing the content using third-party distribution tools

Article:HOWTO55198  |  Created: 2011-06-29  |  Updated: 2011-12-16  |  Article URL http://www.symantec.com/docs/HOWTO55198
Article Type
How To


Subject


Distributing the content using third-party distribution tools

To use third-party distribution tools to distribute content to client computers, you need to use the index2.dax file. The LiveUpdate-related content in the index2 file includes a set of GUIDs called content monikers and their associated sequence numbers. Each content moniker corresponds to a particular content type. Each sequence number in the index2 file corresponds to a revision of a particular content type. Depending on the protection features that you have installed, you need to determine which of the content types you need.

See About the types of content that LiveUpdate can provide.

Content moniker mapping for updating legacy clients

Except for virus and spyware definitions, which are backwards compatible with Symantec Endpoint Protection 11.x releases, this content is for clients that run the current release of Symantec Endpoint Protection. If you have legacy clients to update with other types of content, you should use legacy content to update them. This method of using third-party management tools cannot be used to update clients running Symantec AntiVirus or Symantec Client Security releases prior to Symantec Endpoint Protection 11.x releases.

Note:

Content monikers typically change with each major release. At times, they may also change for a minor release. Symantec does not typically change the monikers for Release Updates or Maintenance Patches.

You can see a mapping of the moniker to its content type by opening the ContentInfo.txt file. The ContentInfo.txt file is typically located in the drive:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content folder.

For example, you might see the following entry:

{535CB6A4-441F-4e8a-A897-804CD859100E}: SESC Virus Definitions 
Win32 v11 - MicroDefsB.CurDefs - SymAllLanguages

Each Symantec Endpoint Protection Manager client group has its own index2 file. The index2 file for each client group is found in a folder for that group. The folders for client groups can be found in drive:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent. The folder name for a client group corresponds to the group policy serial number. You can find the serial number in the Group Properties dialog box or on the Clients page Details tab. The first four hexadecimal values of each group policy serial number match the first four hexadecimal values of that group's folder.

The index2.dax file that managed clients use is encrypted. To look at the contents of the file, open the index2.xml file that is available in the same folder. The index2.xml file provides a list of the content monikers and their sequence (revision) numbers. For example, you might see the following entry:

<File Checksum="191DEE487AA01C3EDA491418B53C0ECC" DeltaFlag="1" 
FullSize="30266080" LastModifiedTime="1186471722609" Moniker=
"{535CB6A4-441F-4e8a-A897-804CD859100E}" Seq="80806003"/>

The LiveUpdate Content policy for a group specifies either a particular revision of content or the latest content. The sequence number in the index2 file must match the sequence number that corresponds to the content specification in the group's LiveUpdate Content policy. For example, if the policy is configured to Use latest available for all content types, then the sequence number for each type is the latest available content. In this example, the distribution only works if the index2 file calls out the sequence numbers (revisions) that correspond to the latest content revision. The distribution fails if the sequence numbers correspond to any other revisions.

Note:

You must use the Copy command to place files into the client's \inbox folder. Using the Move command does not trigger update processing, and the update fails. If you compress content into a single archive for distribution, you should not unzip it directly into the \inbox folder.

If you distribute virus and spyware content to legacy clients that use Symantec Endpoint Protection 11.x, the moniker scheme has changed. You can use the 12.x definitions to update legacy clients, but you must rename the target moniker before you distribute them.

To distribute content to clients with third-party distribution tools

  1. On the computer that runs the Symantec Endpoint Protection Manager, create a working folder such as \Work_Dir.

  2. Do one of the following actions:

    • For a managed client, in the console, on the Clients tab, right-click the group to update, and then click Properties.

    • For an unmanaged client, in the console, on the Clients tab, right-click My Company, and then click Properties.

  3. Write down the first four hexadecimal values of the Policy Serial Number, such as 7B86.

  4. Navigate to the following folder:

    \\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent

  5. Locate the folder that contains the first four hexadecimal values that match the Policy Serial Number.

  6. Open that folder, and then copy the index2.dax file to your working folder.

  7. Navigate to the following folder:

    \\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content

  8. Open and read ContentInfo.txt to discover the content that each target moniker folder contains.

    The contents of each directory is target moniker\sequence number\full.zip|full.

  9. Copy the contents of each \target moniker folder to your working folder such as \Work_Dir.

  10. To distribute virus and spyware definitions content to Symantec Endpoint Protection 11.x legacy clients, you must take the following steps:

    • For 32-bit computers, copy the {535CB6A4-441F-4e8a-A897-804CD859100E}\sequence number\full.zip contents.

      Rename the contents to {C60DC234-65F9-4674-94AE-62158EFCA433}\sequence number\full.zip, then copy the contents to your working folder.

    • For 64-bit computers, copy the {07B590B3-9282-482f-BBAA-6D515D385869}\sequence number\full.zip contents.

      Rename the contents to {1CD85198-26C6-4bac-8C72-5D34B025DE35}\sequence number\full.zip, then copy the contents to your working folder.

  11. Delete all files and folders from each \target moniker so that only the following folder structure and file remain in your working folder:

    \\Work_Dir\target moniker\latest sequence number\full.zip

    Your working folder now contains the folder structure and files to distribute to your clients.

  12. Use your third-party distribution tools to distribute the content of your working folder to the \\Symantec Endpoint Protection\inbox\ folder on each of the clients.

    The end result must look like the following:

    \\Symantec Endpoint Protection\inbox\index2.dax

    \\Symantec Endpoint Protection\inbox\target moniker\latest sequence number\full.zip

    Files that are processed successfully are then deleted. Files that are not processed successfully are moved to a subfolder named Invalid. If you see files in an Invalid folder under the inbox folder, then you must try again with those files.

See Using third-party distribution tools to update client computers

See Preparing unmanaged clients to receive updates from third-party distribution tools


Legacy ID



v39377827_v59371754


Article URL http://www.symantec.com/docs/HOWTO55198


Terms of use for this information are found in Legal Notices