Best practices for managing laptop and mobile clients with Symantec AntiVirus Corporate Edition
|Article:TECH100051|||||Created: 2002-01-30|||||Updated: 2011-08-15|||||Article URL http://www.symantec.com/docs/TECH100051|
This document provides best practices for managing Symantec AntiVirus Corporate Edition mobile clients, including how to keep them protected and keep their virus definitions up to date.
With Symantec AntiVirus Corporate Edition, there are two solutions available for managing mobile clients. You can use the new Client Groups feature, or create a Symantec AntiVirus Corporate Edition server specifically for these clients. Either of these methods will configure laptop and mobile clients to be "sometimes managed" clients. This means that they will act as managed clients while on the network, and will also be able to perform updates on their own when away.
Solution 1: Client Groups
Symantec AntiVirus Corporate Edition contains the Client Groups feature, which allows you to arrange clients arbitrarily to share a common configuration. For more information on client groups, do one of the following:
- If you are using Symantec AntiVirus 10.x, read the document Creating and managing client groups in Symantec Client Security 3.0.
- If you are using Symantec AntiVirus 9.x, read the document Creating and managing client groups in Symantec System Center 6.0.
- If you are using Symantec AntiVirus 8.x, read the document How to create and manage Client Groups in Symantec System Center 5.0.
To configure a client group to manage mobile clients
- Create a new client group, and add the mobile clients to this group.
- Right-click the client group, and then uncheck Inherit Settings From Server Group.
- Configure the Virus Definition Manager settings for this group. Uncheck the "Do not allow clients to manually launch LiveUpdate" option, and enable the Continuous LiveUpdate option. This will allow mobile clients to run LiveUpdate manually, and will run LiveUpdate automatically if the definitions are out-of-date.
Solution 2: Create a new parent server
This was the recommended method for configuring mobile clients in previous versions of Norton AntiVirus Corporate Edition. Although client groups are easier to set up in Symantec AntiVirus Corporate Edition, this method is still a viable option for mobile clients.
For those who are familiar with administering a Symantec AntiVirus Corporate Edition network, here is the short solution:
- Install a new Symantec AntiVirus Corporate Edition server, and put it in a new server group.
- Configure the Virus Definition Manager at the group level to allow clients to run LiveUpdate.
- If desired, configure the server to connect to another primary server for definition updates.
- Install new clients as children of this server, or migrate existing clients using the Grc.dat file.
These are detailed instructions for creating a new Symantec AntiVirus Corporate Edition server for mobile clients:
- Install the Symantec AntiVirus server software on an Windows NT-based computer, and when the installation prompts for a server group, create a new server group with a uniquely identifying name. When the installation is complete, be sure to restart the computer before continuing.
- Open the Symantec System Center, and you should now see the new server group that was created. Right-click the server group and click Unlock server group, then enter the password to unlock it. Expand the group, then right-click the new server and select Make Primary Server.
- Right-click the new server group and click All Tasks > Symantec AntiVirus and click Virus Definition Manager, which will display the virus definition update options for the group. We recommend that you configure this server to retrieve its updates from the other primary server in your environment, rather than using LiveUpdate to retrieve definitions from the Symantec servers, and allow the clients to run LiveUpdate manually. Here are the recommended settings:
- Click "Update the primary server of this server group only," then click Configure.
- Click Source, then select Another protected server. Then, select the other primary server from the list of available Symantec AntiVirus Corporate Edition servers. Click OK twice to return to the server configuration window.
- Ensure that the server is scheduled to update regularly.
- If desired, select "Schedule client for automatic updates using LiveUpdate," then click Schedule to create an appropriate update schedule. Click OK to return to the Virus Definition Manager window.
- Uncheck "Do not allow clients to run LiveUpdate", which will allow the attached clients to run LiveUpdate manually. Click OK.
- Right-click the new server group, then click All Tasks > Symantec AntiVirus, and click Client Realtime Protection Options or Client Auto-Protect Options, which will display the default settings for all clients in this new group. If you need to make any changes to these settings, modify them as needed, then click the Reset All button. Click Reset All again on the confirmation prompt that appears.
- Install the Symantec AntiVirus Corporate Edition client software on the mobile computers, and configure the clients to be managed by this newly created server. If you have laptop clients that are already managed by a different server, you can use the Grc.dat file to move the clients to this new server.
For more information on this method, read the document for your program version:
Article URL http://www.symantec.com/docs/TECH100051