Best practices for running Symantec Endpoint Protection or Symantec AntiVirus Corporate Edition with Symantec Mail Security for Domino on the same server

Article:TECH90417  |  Created: 2008-01-02  |  Updated: 2012-03-08  |  Article URL
Article Type
Technical Solution




This page is the best practices for running a Symantec Corporate Edition product and a Symantec Mail Security for Domino product on the same Domino server.

One of the following antivirus versions is installed:

  • Symantec Endpoint Protection 11.x (SEP 11)
  • Symantec AntiVirus Corporate Edition 10.x - 7.x (SAV)

One of the following versions of Symantec Domino product is also installed:

  • Symantec Mail Security for Domino 8.0 - 5.x on Windows 2000/2003.



Do the following when a Symantec AntiVirus or Symantec Endpoint Protection client is running on the same computer as a Symantec Mail Security for Domino product:

  • Make sure that the SAV or SEP services load before the Symantec Domino product task.
  • Make sure the File System Realtime Protection does not scan the TEMP folder used by the Symantec Domino product.
    For instructions to configure Realtime Protection, follow the link in the References section of this page


  • Symantec recommends that you install SAV or SEP to your server as an unmanaged client or as a managed client in a group. This method of installation does not overwrite your exclusions.
  • Do not install the " E-mail Auto Protect Tools" for SAV or SEP when you install it to your server.
  • If SAV or SEP have been installed on a Lotus Domino or other SMTP server, uninstall the e-mail tools instead of disabling the E-mail tools.
    This feature monitors standard SMTP ports and can cause performance degradation or failure if installed to a mail server. See the links in the Reference section of this page for more information.

Updating Virus Definitions
Do not replicate virus definitions for the Symantec Mail Security for Domino with SAV or SEP installed on your Domino servers.

If SAV or SEP is installed on the Domino server, then it is possible update virus definitions for both products by using one or more of the following methods:

  • Configure SAV to use the Virus Definition Transport Method (VDTM).
  • If using 64-bit SAV, configure LiveUpdate settings from Symantec System Center (SSC).  If using SEP, configure LiveUpdate settings from the Symantec Endpoint Protection Manager (SEPM) interface.
  • Download and run virus definitions from the Download Virus Definitions (Intelligent Updater Only) Web page.

Running LiveUpdate from within the Symantec Mail Security for Domino console does not fully update definitions for SAV or SEP because this method downloads only mail security content.  It does not download the .xdb file used by SAV or SEP.

Use the following guidelines to determine whether you should run LiveUpdate for Symantec Mail Security for Domino.

To update definitions if you are running a Symantec AntiVirus Corporate Edition Server

  1. Disable LiveUpdate for Symantec Mail Security for Domino.
  2. Configure LiveUpdate for the SAV server or ensure that it is receiving virus definitions from another SAV server.
  3. Symantec Mail Security will use the definitions provided by SAV.

To update definitions if SAV or SEP are running as a managed client

  1. Disable LiveUpdate for Symantec Mail Security for Domino.
  2. If the Virus Definition Transport Method (VDTM) is being used to update virus definitions from a parent server, the SAV client will use whatever definitions the parent server is using. In that case it is not necessary to configure LiveUpdate for the Corporate Edition client.
  3. Symantec Mail Security will use the definitions provided by Corporate Edition.

To update definitions if SAV or SEP are running as an unmanaged client
Do one of the following:

  • Run LiveUpdate for the SAV or SEP product to update both products.
  • Replicate virus definitions from the Hub server to this Spoke server using Savdefs.nsf.

For detailed instructions to configure File System Realtime Protection, please read Preventing Symantec AntiVirus Corporate Edition from scanning the temporary folder for Symantec products for Domino on a Notes Server.

For information about the E-Mail Auto-Protect plug-ins, read the following Symantec Knowledge Base articles:

If there is a need to remove the email tools, it is necessary to restart the server to complete the removal process.

Legacy ID


Article URL

Terms of use for this information are found in Legal Notices