Video Screencast Help

How to Configure the Proxy settings in the Symantec Endpoint Protection Manager (SEPM) 12.1

Created: 23 Feb 2012 • Updated: 02 Mar 2012 | 5 comments
Language Translations
Mithun Sanghavi's picture
+15 15 Votes
Login to vote

Title: How to Configure the Proxy settings in the Symantec Endpoint Protection Manager (SEPM) 12.1

Solution:

1 - For Proxy server and Symantec Endpoint Protection Manager communication settings

The following steps explain how to setup the Symantec Endpoint Protection Manager to use a proxy server to download content via LiveUpdate.

  1. Click on Admin
  2. Click on Servers
  3. In the "view servers pane" select the name of the manager under local site
  4. After selecting your server, in the tasks pane, click on Edit the Server Properties, a dialog box will open up
  5. Click on Proxy Server
  6. Fill out your appropriate settings and credentials for HTTP and FTP as required for access.

 

If a network includes HTTP proxy servers, you must establish a connection between an HTTP proxy server and Symantec Endpoint Protection Manager. The HTTP proxy server automatically connects to the Symantec Subscription Services.

You can also use an FTP proxy server to connect to the Symantec Subscription Services.
 

 

2 - Proxy settings for client submissions and other external communications

  1. In the Symantec Endpoint Protection Manager (SEPM) select the Clients tab, then select the group you would like to modify the proxy settings for.
  2. Select the Policies  tab on the right hand side.
  3. Under Location-Independent Policies and Settings locate the Settings box.
  4. In the box you will see External Communication Settings
  5. Click on the link and select the Proxy Server tab.

 

This lets you configure clients to use a proxy server for all external communications except LiveUpdate communication. You can configure a separate proxy server to use for external communications other than LiveUpdate.

These settings do not affect any other servers or the Group Update Provider that are selectable on the LiveUpdate Server tab.

 

3 - Liveupdate Application.

Correct Proxy settings are also to be configured on Liveupdate Application.

  1. Click on Start
  2. Click on Control Panel
  3. Double-click Symantec LiveUpdate. The LiveUpdate Configuration dialog box appears.
  4. Click the HTTP tab.
  5. Select I want to customize my HTTP settings for LiveUpdate.
  6. Select Use a proxy server for HTTP connections.Enter the IP address and port.
  7. In case it needs to be authorized to go out through the proxy, select that option, and enter  Username and Password for both FTP and HTTP.

    Note: The Username and Password for the proxy server are not the same as  Internet service provider (ISP)

  8. Click OK.
  9. Repeat this procedure for the FTP tab if necessary.

 

HTTP settings provide LiveUpdate with the settings required to connect to the Internet through your network.

You can change your HTTP settings using either the LiveUpdate Configuration option in the LiveUpdate user interface, or by using the Symantec LiveUpdate option in the Control Panel. By default, LiveUpdate uses the same proxy server settings that you have set up for use with Internet Explorer.

 

4 - Microsoft Internet Explorer.

Correct Proxy settings are also to be configured under Microsoft Internet Explorer.

  1.  Open the Microsoft Internet Explorer
  2. Click on Tools TAB
  3. Click on Internet Options
  4. Click on Connections TAB
  5. Click on LAN settings Button
  6. Under Proxy Server option,  enter the IP address and port.

 Note: Necessary steps should be taken to Configure the proxy settings in any Default Browser being used other than Microsoft Internet Explorer.

 

 

5 - Check the Proxy settings in the Internet Explorer of the System Account.

Try the following steps on the SEPM server machine of Windows 2003, Windows XP.

The solution need to done for the SYSTEM account, because when LiveUpdate is scheduled  to run it uses the SYSTEM account by default:

Check the SYSTEM proxy settings by following these steps...

  1. Click 'Start' and click 'Run'
  2. Type at 12:00 /INTERACTIVE "C:\Program Files\Internet Explorer\iexplore.exe" in the 'Run' box and click 'OK'
  3. It will create a scheduled task.
  4. Go to 'Scheduled Tasks' folder in 'Control Panel'
  5. Right click the file named 'At1' and click 'Run'. It will open an Internet Explorer page.
  6. Click 'Tools' menu, click 'Internet Options' and click on the 'Connections' tab.
  7. Verify the connection settings and proxy settings.
  8. SEP client would start getting updated with the latest definition.

Note: The above steps would not work on Windows Vista, Windows 7, Windows 2008.

Incase, of Windows Vista, Windows 7 or Windows Server 2008 / Server 2008 R2, check this Article: http://www.symantec.com/docs/TECH96141

 

6 - Incase, using an Internal LiveupdateServer (LiveupdateAdministrator)

Note: You configure proxy settings for other client  communications separately.

 

To specify a proxy server that clients on Windows computers use to communicate to Symantec LiveUpdateor an internal LiveUpdateserver

1.In the console, click Policies.
2.Under Policies, click LiveUpdate, and then click the LiveUpdateSettings tab.
3.Right-click the policy that you want and then select Edit.
4.Under Windows Settings, click Server Settings.
5.Under LiveUpdateProxy Configuration, click Configure Proxy Options.
6.On the HTTP or HTTPS tab or the FTP tab, select the desired options.
7.See the online Help for more information about the options.
8.Click OK in the dialog box.
9.Click OK.

Comments 5 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

Here are few Important Symantec Knowledgebase Links related to Proxy - 

1. Configuring Symantec Endpoint Protection Manager to connect to a proxy server to access the Internet

http://www.symantec.com/docs/HOWTO55201

2. How to configure a Symantec Endpoint Protection Manager (SEPM) 12.1 client to use a proxy for LiveUpdate

http://www.symantec.com/docs/TECH167247

3. Specifying a proxy server for client submissions and other external communications

http://www.symantec.com/docs/HOWTO55363

4. Specifying a proxy server that clients use to communicate to Symantec LiveUpdate or an internal LiveUpdateserver

http://www.symantec.com/docs/HOWTO55358

5. Ports and Protocols to be allowed when using a proxy in a Symantec Endpoint Protection environment.

http://www.symantec.com/docs/TECH131843

6. How to bypass the IIS proxy after migrating to Symantec Endpoint Protection 12.1

http://www.symantec.com/docs/TECH161964

7. How to bypass the IIS proxy after upgrading to Symantec Endpoint Protection Manager 12.1

http://www.symantec.com/docs/TECH162324

8. What is the Endpoint Protection 12.1 IIS ISAPI proxy and when is it installed?

http://www.symantec.com/docs/TECH180596

9. How to set proxy settings in Java LiveUpdate

http://www.symantec.com/docs/TECH100706

10. Required exclusions for proxy servers to allow Symantec Endpoint Protection to connect to Symantec reputation and licensing servers

http://www.symantec.com/docs/TECH162286

 

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

+8
Login to vote
Srikanth_Subra's picture

Good collections...

Thanks & Regards,

 Srikanth.S

"Defeat the Defeat before the Defeat Defeats you"
(Swami Vivekananda)

0
Login to vote
John Santana's picture

thank you for sharing here Mithun !

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

0
Login to vote
W007's picture

Thanks mithun for sharing knowladge base artical.

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

0
Login to vote