Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

How to Install Symantec Network Access Control when SEPM is already installed and Running

Updated: 03 Nov 2009 | 14 comments
shp's picture
+11 13 Votes
Login to vote

How to Install Symantec Network Access Control when SEPM is already installed and Running

 

About SNAC: Symantec Network Access Control ensures that a company's client computers are
compliant with the company's security policies before the computers are allowed
to access the network. Symantec Network Access Control uses a Host Integrity
Policy and an optional Symantec Enforcer to discover and evaluate which
computers are compliant.

Availability: Symantec Network Access Control can be downloaded from https://fileconnect.symantec.com.

How to enable: There are two methods to enable SNAC on already running SEPM...


Method 1
:Manually copy the License file (SNAC.XML) from SNAC CD and add the packages to Client Install packages under SEPM.

a. Go to SEPM folder on SNAC CD and copy the snac.xml file.
001.JPG

b. Paste the snac.xml file inside "Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\license" folder.
002.JPG

c. Restart the "Symantec Endpoint Protection Manger".
003.JPG

d. After completing the above steps SNAC will be enabled on your SEPM. Now you can add SNAC packages to "Client install packages". Go to Admin-->Install Packages-->Add Client install package. browse the SNAC folder in the CD and select setup.exe file.
004.JPG
 

e. Same procedure can be followed for 64 bit package also. Folder name is SNACWin64.
005.JPG

 

Method 2: Upgrade from CD.

a. When you put the cd "Symantec endpoint protect installation program" menu will appear. If its not coming open the CD and run setup.exe (It is there in the root directory).
006.JPG

b. Select Install Symantec Network Access Control.
007.JPG

c. Select Install Symantec Endpoint protection Manger. Now it copies the License file and starts configuring SEPM.
008.JPG

d. Once the "Management server upgrade wizard" starts click Next. 
009.JPG

e. Once Wizard is complete click "Next" and "Finish".
010.JPG

f. After the upgrade wizard SEPM configuration wizard appears.. Provide the appropriate values and complete the configuration. 
011.JPG

Now your SNAC installation is complete.

 

How to see SNAC component on SEPM and Clients:

After the installation OF SNAC "Host Integrity" policy will appear under Policies tab. Now you can modify and assign it to any group.

 012.JPG

Once clients get that policy you will see Network Access Control on Client UI.
013.JPG

 
Hope this will help administrators..
In case of any correction.. please comment....

 

 

Comments

Vikram Kumar-SAV to SEP's picture
14
Oct
2009
4 Votes +4
Login to vote

 One basic correction..You

 One basic correction..You need to put your article under NEtwork Access Control aswell. Edit you article and Select Network Access Control

Filed under: 

shp's picture
14
Oct
2009
3 Votes +3
Login to vote

Thanks Vikram... I saw some

Thanks Vikram... I saw some people asking the same thing in many posts.. so i created this article... Hope this will help everyone out there.... 

Regards,
Srinivas H.P.
HCL Infosystems Ltd

narayanan_nortech's picture
09
Nov
2009
2 Votes +2
Login to vote

hi shp, can u help me to

hi shp,

can u help me to install snac with end point protection. when i try to install snac after installin end point protection, it shows snac is already installed, but i cant c the snac option when i open the end point protection menu. But in the licence folder snac.xml is there.

Lekshmy Narayanan
Nortech Infonet

vinodmanu's picture
04
Nov
2009
1 Vote +1
Login to vote

Dear Sir, I Have installed

Dear Sir,

I Have installed symantec MR5  SEPM server and 115 client machines all the client are not showing the latest upday defination of viruse and the green dot is also not appear in the tool bar, the serial no of police update is also differ will you please help me in this regareds.

vinod manu 

shp's picture
05
Nov
2009
2 Votes +2
Login to vote

Try sylinkreplacer download

Try sylinkreplacer download from here 
https://www-secure.symantec.com/connect/downloads/...

If you have any doubts post it under forum section... 
 

Regards,
Srinivas H.P.
HCL Infosystems Ltd

Optimus Prime's picture
05
Nov
2009
1 Vote +1
Login to vote

Nice one.

This is great..hope more info like this will come up.

;-)

-The GodFather-'s picture
05
Nov
2009
1 Vote +1
Login to vote

Cheverlu

Nice article, thanks. Cheverlu! Chuvanes.

John Optimus

landdesignguy's picture
06
Nov
2009
0 Votes 0
Login to vote

 nice article. thank you for

 nice article. thank you for posting this

Residential landscape designing for other information about me

Kesavan's picture
08
Nov
2009
1 Vote +1
Login to vote

Nice Article for SNAC

very nice. i think from next  corporate  renewal, SNAC will be free with SEPM. i.e we will get both in one license.
i am not sure about this.

 

josh_symc's picture
21
Apr
2010
0 Votes 0
Login to vote

setup.exe at root of SNAC CD, with install SEPM is preferred

The snac.xml license file method however should work, but we would rather see folks use the setup.exe :)

jayans's picture
23
Apr
2010
1 Vote +1
Login to vote

nice  ya.............

nice  ya.............

Chuck Edson's picture
31
Aug
2010
0 Votes 0
Login to vote

DO NOT USE THE COPY SNAC.XML METHOD!!

You MUST run the COMPLETE installer from the SNAC Add-on CD.  

Just copying the snac.xml file will make it seem that it all works, but as someone who works in Support, I have seen various issues occur when this method is used, especially when using an Enforcer (either the Appliance or Integrated Enforcer).

The snac.xml file unlocks the GUI portion.  However, the SNAC-only clients are not installed, and some critical framework is not installed.

Please, run the complete installer from the CD.  You will need to reboot the server.  This should not be a problem because the clients will all hold their logs until they reconnenct to the server.

Fahad Shaker's picture
08
May
2011
0 Votes 0
Login to vote

great article, very thanks.

great article, very thanks.

SolarisMaestro's picture
22
Sep
2011
1 Vote +1
Login to vote

Applying a license

I found that if I had already applied an SPS 4.0 (SNAC and SEP activation in one .slf) license that includes the SNAC activation first and then tried configuring SNAC by going through the setup.exe, the SNAC component still showed as unlicensed.

I then deleted the license file and then reapplied and found that SNAC was then added as a licensed feature.

Just thought I would bring this up in case anyone was wondering how to activate SNAC in SEPM if the license was previously applied.

Thank you for marking as a solution if you felt this response met your needs!