Best practices for running Symantec Endpoint Protection and SMS for Domino on the same server.

Article:TECH80506  |  Created: 2002-01-18  |  Updated: 2014-11-24  |  Article URL
Article Type
Technical Solution


Best practices for running Symantec Endpoint Protection (SEP) and Symantec Mail Security (SMS) for Domino product on the same Domino server.



 One of the following antivirus versions is installed:

  • Symantec Endpoint Protection (SEP) version 11 through 12.1

One of the following versions of Symantec Domino (SMSDOM) product is also installed:

  • Symantec Mail Security 8.x for Domino
  • Symantec Mail Security 7.x for Domino


Do the following when an antivirus product is running on the same computer as a Symantec Domino product:

  • Make sure the SEP service loads before the Symantec Domino product task.
  • Make sure the File System Realtime Protection does not scan the TEMP folder used by the SMS for Domino product.
    For instructions to configure Realtime Protection, follow the link in the References section of this page.
  • Make sure there are no email scanning utilities enabled or installed in the local antivirus.



  • Symantec recommends to install SEP to the Domino server as an unmanaged client or as a managed client in a group. This method of installation does not overwrite any existing exclusions.
  • Do not choose "Internet Email Scanning" (the optional Lotus Notes Auto-Protect component) or any tools that have to do with email for SEP when installing SEP to the server.
    These features monitor standard SMTP ports and can cause performance degradation or failure if installed it to a mail server. See the links in the Reference section of this page for more information.
  • If using SEP 12.1, SMS for Domino will require Java LiveUpdate (JLU) to be installed..  SEP 12.1 and SMS for Domino are unable to share antivirus definitions.

Updating Virus Definitions
Do not replicate virus definitions for the SMS for Domino with SEP installed on the Domino servers.

If SEP is installed on the Domino server, then update virus definitions for both products by using one or more of the following methods:

  • Run or schedule LiveUpdate from Symantec System Center or the Symantec Endpoint Protection interface.
  • Download and run virus definitions from the Download Virus Definitions (Intelligent Updater Only) Web page.
  • Configure Symantec Endpoint Protection to use the Virus Definition Transport Method.

Running LiveUpdate for Symantec Mail Security for Domino does not update definitions for Symantec Endpoint Protection, because it does not download the .xdb file required.

Use the following guidelines to determine whether to run LiveUpdate for Symantec Mail Security for Domino.

To update definitions if running a Symantec Endpoint Protection Server:

  1. Disable LiveUpdate for Symantec Mail Security for Domino.
  2. Configure LiveUpdate for the Protection Engine server or ensure that it is receiving virus definitions from another Protection Engine server.
  3. Symantec Mail Security will use the definitions provided by Protection Engine.

To update definitions if running Symantec Endpoint Protection as a managed client:

  1. Disable LiveUpdate for Symantec Mail Security for Domino.
  2. If using the Virus Definition Transport Method (VDTM) to update virus definitions from a parent server, the client will use the definitions the parent server is using. It is not required to configure LiveUpdate for the Corporate Edition client.
  3. Symantec Mail Security will use the definitions provided by Corporate Edition.

To update definitions if you are running Symantec Endpoint Protection as an unmanaged client:
Do one of the following:

  • Run LiveUpdate for the Symantec Domino product to update both products.
  • Replicated virus definitions using Savdefs.nsf.
  • Update virus definitions using any of the supported methods for the Corporate Edition product.

For detailed instructions to configure File System Realtime Protection, read Symantec Knowledge Base article:
Preventing Symantec Endpoint Protection from scanning the temporary folder of Symantec Mail Security for Domino.

For information about the E-Mail Auto-Protect plug-ins, read the following Symantec Knowledge Base articles:

Installing Java LiveUpdate after SMS for Domino has been installed:


Legacy ID


Article URL

Terms of use for this information are found in Legal Notices