Push install Symantec Endpoint Protection 12.1 clients using Remote Push

Article:TECH164327  |  Created: 2011-07-11  |  Updated: 2014-10-22  |  Article URL http://www.symantec.com/docs/TECH164327
Article Type
Technical Solution


You want to push install Symantec Endpoint Protection 12.1 (SEP) to client computers on the network, using the Remote Push option in Symantec Endpoint Protection Manager (SEPM).




Remote Push pushes the client software to the computers that you specify. Using Remote Push requires knowledge of how to search networks to locate computers by IP address or computer names. Once the package copies to the target computer, the package installs automatically. The computer user does not need to begin the installation or to have administrator privileges.

Remote Push comprises the following tasks:

  • You select an existing client installation package, create a new installation package, or create a package to update communication settings.
  • For new installation packages, you configure and create the installation package.
  • You specify the computers on your network to which SEPM sends a package.

    Remote Push locates either specific computers for which you provide an IP number or range, or all computers that are visible by browsing the network.


Follow these pre-installation steps to prepare computers to install SEP client:

  • Ensure that the client computers can be accessed via the network.
  • Ensure that the client computers run a supported operating system.
  • Modify firewall settings to allow communication between SEP components.
  • Ensure that you have administrator credentials for the client computers you want to deploy to.
  • Uninstall currently installed third-party security software or legacy Symantec virus protection software (if you do not plan to migrate the settings).
  • To push install to Mac clients in the Browse Network tab, you must install the Bonjour service on the SEPM server.

Install clients

To install clients using the Remote Push option of the Client Deployment Wizard:

  1. In the SEPM console, click Home.
  2. On the Home page, in the Common Tasks menu, select Install protection client to computers. The Client Deployment wizard starts.
  3. Choose one of the following:
    • New Package Deployment – Select packages from the server and specify client group and features:
      • Install Packages
      • Group
      • Install Feature Sets
      • Install Settings
      • Content Options
      • Preferred Mode
    • Existing Package Deployment – Choose from previously exported packages that are located on your hard drive.
  4. Click Next.
  5. Click Remote Push, and then click Next.
  6. Browse or search the network to locate the computer(s) to receive the client software, and then click >> to add the computer(s) to the list.
    • To browse the network for computers, click Browse Network.
    • To find computers by IP address or computer name, click Search Network, and then click Find Computers.
    • Authenticate with the domain or workgroup if prompted. Use credentials that have installation rights over the target computers.

  7. Note: You can set a timeout value to constrain the amount of time the server applies to a search.

  8. Click Next.
  9. Click Send to push the client software to the selected computers.
  10. Wait while the client software is pushed to the selected computers. Any message indicating success refers to a successful push to the client.
  11. Click Finish.

Additional information
  • You cannot push install the Linux client with Remote Push.
  • The installation starts automatically on the client computers and takes several minutes to complete.
  • Depending on the client restart settings of the deployed client, you or the users may need to restart the client computers.
  • The installation should succeed even when no users are logged on to their computers. However, the computers must be powered on.
  • You can confirm the status of deployed clients in the management console.

Install clients using the Push Deployment Wizard

Alternatively, you can install clients using the Push Deployment Wizard instead of the Client Deployment Wizard in the following situations:

  • When you want to install clients on a remote location where you have few computers, but the bandwidth between the two locations is very low, so you are unable to install all the clients at one time.
  • As a backup when you are unable to use the Client Deployment Wizard integrated into the SEPM.
  • To deploy client installation packages from any computer, even when you don't have access to the SEPM console. You need administrator rights to the Windows domain to which the client computers belong, or to the computers themselves if they are in workgroups.
  • If you have a pre-existing package. If you want to create a new or custom installation package, you must use the Client Deployment Wizard.


Remote push fails

If Remote Push is unable to push the installation package to the client computer, verify that you have adequately prepared the client computer for remote deployment. Also verify that any existing firewall software does not block the communication ports required for push deployment of SEP clients.

Remote push works, but client installation fails

To troubleshoot a failed client installation, review the Microsoft Installer (MSI) and Symantec Installer Server (SIS) logs.

Watch these steps

Article URL http://www.symantec.com/docs/TECH164327

Terms of use for this information are found in Legal Notices