Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

How do I create and configure a custom Symantec Endpoint Protection installation package in version 12.1?

Created: 28 Jul 2011 • Updated: 02 Jul 2012 | 14 comments
Language Translations

User Translations

Machine Translations

Mithun Sanghavi's picture
+14 14 Votes
Login to vote

To create a new custom client installation configuration

  1. Open the Symantec Endpoint Protection Manager console.
  2. On the Admin Tab, under Tasks, click Install Packages.
    The current default client installation packages appear on the right.
  3. Under Install Packages, click Client Install Settings.
  4. Under Tasks, click Add Client Install Settings.
  5. Specify the name you would like the custom Client Install Settings to have.
  6. Give the custom Client Install Settings a description.
  7. Select an installation type from the following:
    • Show progress bar only (Displays notification, but requires no user input)
    • Interactive (User input required)
    • Silent (No user input or display)
  8. Select the installation location (default or custom folder). 
  9. Enable or disable installation logging.
  10. Submit reputation information to Symantec Security Response. 
  11. Select whether or not to add the program to the Start Menu.
  12. Select whether or not to maintain all previous logs, policies, and client-server communication settings
  13. Viewing the 'Schedule Reboot' tab, consider whether to force or schedule a reboot.
  14. Click OK.

To know more about :

Restarting client computers : http://www.symantec.com/docs/HOWTO55111

To create a new custom Install Feature Set

  1. Open the Symantec Endpoint Protection Manager console.
  2. On the Admin tab, under Tasks, click Install Packages.
    The current default client installation packages appear on the right.
  3. Under Install Packages, click Client Install Feature Set.
  4. Under Tasks, click Add Client Install Feature Set.
  5. Specify the name you would like the custom Client Install Feature Set to have.
  6. Give the custom Client Install Feature Set a description.
  7. Select the Feature Set version 11.x or 12.1.x 
  8. Select the Symantec Endpoint Protection features you want to include in the install package from the following list:
    • Virus, Spyware and Basic Download Protection
      • Advanced Download Protection
      • Microsoft Outlook Scanner
      • Lotus Notes Scanner
      • POP3/SMTP Scanner
    • Proactive Threat Protection
      • SONAR Protection
      • Application and Device Control
    • Network Threat Protection
      • Firewall
      • Intrusion Protection
  9. When you are finished, click OK.

To know more about :

The Default Client Install Feature Set: http://www.symantec.com/docs/HOWTO55062

To create the new custom install package

  1. In the Symantec Endpoint Protection Manager console, on the Admin tab, under Tasks, click Install Packages.
    The current default client installation packages appear on the right.
  2. Under  Install Packages, click Client Install Packages.
  3. Under Tasks, click Export Client Install Package.
  4. Browse to or create a preferred export folder, and select it.
  5. Select whether or not you want to create a single .EXE file. Unchecking single .EXE will export mutiple files, including an *.MSI installer file.
  6. Under "Pick the customized installation settings below", from the drop down menu, select your custom Client Install Setting.
  7. Under "Select the features you want to use", from the drop down menu, select your custom Client Install Feature Set.
  8. Choose "Export a managed client", then select the group to which the client will be installed. If no group has been created, select the Default Group. It is recommended to leave "Add clients automatically to the selected group" checked.
  9. Select the Preferred Policy Mode. The default is Computer mode.
  10. Click OK.

The new install package is created in the location you specified.

See About the types of threat protection that Symantec Endpoint Protection provides.

See Configuring client installation package features.

After installation, you can enable or disable the protection technologies in the security policies.

See About enabling and disabling protection.

See Performing tasks that are common to all security policies.

Comments 14 CommentsJump to latest comment

mssym's picture

If I do not want to use all the features, such as, Firewall as I use Windows firewall and no plan to switch over to Symantec firewall yet, but I do want to use Application and Device Control, in SEP 11, I have to install firewall as it is required for Application and Device Control, Are there any changes in SEP 12.1 on this setting? or I still need to install Firewall if I wish to use Application and device control in SEP 12.1.

0
Login to vote
Mithun Sanghavi's picture

Hello,

Yes, In SEP 12.1, Application and Device Control is not a Part of Firewall.

In other words, In SEP 12.1, you can Install Application and Device Control Individually.

Note: Application and Device Control Policies do not work on 64-bit client computers running 11.x. They will work on 64-bit clients running 12.1.

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

+2
Login to vote
John Santana's picture

Thanks for sharing this information Mithun !

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

0
Login to vote
humtake's picture

Are there any instructions on how to create an install package that includes all up-to-date signatures and updates?  Every time we deploy a package it saturates the network for a good 20 minutes while it pulls down all of the updates.  It would be easier if we can just include them in the package.  I was told that SEP 12.1 has an easy way to do this.  In SEP 11, it was a pain and not worth the time.  Please let me know if there is a way.  Thank you.

+1
Login to vote
Mick2009's picture

Hi humtake,

In the SEP 12.1 SEPM, it is possible to export a client either with the latest definitiions in place (a larger package) or a smaller one that will need to run LU to update assoon as it is installed.  The "All content (recommended)" will create a package with all the defs. 

How to export Symantec Endpoint Protection (SEP) client install packages without any definitions or package with Basic Content.
http://www.symantec.com/docs/TECH178698 
 

With thanks and best regards,

Mick

+1
Login to vote
John Santana's picture

So yes, after it contacted the SEPM server, then it can update itslef right ?

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

0
Login to vote
Mick2009's picture

Yes, from SEPM or GUP or LiveUpdate- whatever is configured.

With thanks and best regards,

Mick

+1
Login to vote
John Santana's picture

Cool, thanks !

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

0
Login to vote