Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

How to Install Symantec Network Access Control when SEPM is already installed and Running

Created: 24 Oct 2009 • Updated: 16 Aug 2012 | 21 comments
Language Translations
shp's picture
+14 16 Votes
Login to vote

<This post has been edited by Symantec Support>

How to Install Symantec Network Access Control when SEPM is already installed and Running

About SNAC: Symantec Network Access Control ensures that a company's client computers are
compliant with the company's security policies before the computers are allowed
to access the network. Symantec Network Access Control uses a Host Integrity
Policy and an optional Symantec Enforcer to discover and evaluate which
computers are compliant.

Availability: Symantec Network Access Control can be downloaded from https://fileconnect.symantec.com.

How to enable: Upgrade from CD.

a. When you put the cd "Symantec endpoint protect installation program" menu will appear. If its not coming open the CD and run setup.exe (It is there in the root directory).
006.JPG

b. Select Install Symantec Network Access Control.
007.JPG

c. Select Install Symantec Endpoint protection Manger. Now it copies the License file and starts configuring SEPM.
008.JPG

d. Once the "Management server upgrade wizard" starts click Next. 
009.JPG

e. Once Wizard is complete click "Next" and "Finish".
010.JPG

f. After the upgrade wizard SEPM configuration wizard appears.. Provide the appropriate values and complete the configuration. 
011.JPG

Now your SNAC installation is complete.

How to see SNAC component on SEPM and Clients:

After the installation OF SNAC "Host Integrity" policy will appear under Policies tab. Now you can modify and assign it to any group.

 012.JPG

Once clients get that policy you will see Network Access Control on Client UI.
013.JPG

 
Hope this will help administrators..
In case of any correction.. please comment....

Comments 21 CommentsJump to latest comment

Vikram Kumar-SAV to SEP's picture

 One basic correction..You need to put your article under NEtwork Access Control aswell. Edit you article and Select Network Access Control

Filed under: Endpoint Protection (AntiVirus) - 11.xEndpoint Protection (AntiVirus)BasicsConfiguringInstallingTip/How toSecurity

Vikram Kumar

Symantec Consultant

The most helpful part of entire Symantec connect is the Search button..do use it.

+4
Login to vote
shp's picture

Thanks Vikram... I saw some people asking the same thing in many posts.. so i created this article... Hope this will help everyone out there.... 

Regards,
Srinivas H.P.
HCL Infosystems Ltd

+3
Login to vote
narayanan_nortech's picture

hi shp,

can u help me to install snac with end point protection. when i try to install snac after installin end point protection, it shows snac is already installed, but i cant c the snac option when i open the end point protection menu. But in the licence folder snac.xml is there.

Lekshmy Narayanan
Nortech Infonet

+2
Login to vote
vinodmanu's picture

Dear Sir,

I Have installed symantec MR5  SEPM server and 115 client machines all the client are not showing the latest upday defination of viruse and the green dot is also not appear in the tool bar, the serial no of police update is also differ will you please help me in this regareds.

vinod manu 

+1
Login to vote
shp's picture

Try sylinkreplacer download from here 
https://www-secure.symantec.com/connect/downloads/...

If you have any doubts post it under forum section... 
 

Regards,
Srinivas H.P.
HCL Infosystems Ltd

+3
Login to vote
Optimus Prime's picture

This is great..hope more info like this will come up.

;-)

+1
Login to vote
-The GodFather-'s picture

Nice article, thanks. Cheverlu! Chuvanes.

John Optimus

+1
Login to vote
landdesignguy's picture

 nice article. thank you for posting this

Residential landscape designing for other information about me

0
Login to vote
Kesavan's picture

very nice. i think from next  corporate  renewal, SNAC will be free with SEPM. i.e we will get both in one license.
i am not sure about this.

+1
Login to vote
josh_symc's picture

The snac.xml license file method however should work, but we would rather see folks use the setup.exe :)

0
Login to vote
Chuck Edson's picture

You MUST run the COMPLETE installer from the SNAC Add-on CD.  

Just copying the snac.xml file will make it seem that it all works, but as someone who works in Support, I have seen various issues occur when this method is used, especially when using an Enforcer (either the Appliance or Integrated Enforcer).

The snac.xml file unlocks the GUI portion.  However, the SNAC-only clients are not installed, and some critical framework is not installed.

Please, run the complete installer from the CD.  You will need to reboot the server.  This should not be a problem because the clients will all hold their logs until they reconnenct to the server.

If a post helps you, please mark it as the solution to your issue.

0
Login to vote
SolarisMaestro's picture

I found that if I had already applied an SPS 4.0 (SNAC and SEP activation in one .slf) license that includes the SNAC activation first and then tried configuring SNAC by going through the setup.exe, the SNAC component still showed as unlicensed.

I then deleted the license file and then reapplied and found that SNAC was then added as a licensed feature.

Just thought I would bring this up in case anyone was wondering how to activate SNAC in SEPM if the license was previously applied.

Thank you for marking as a solution if you felt this response met your needs!

+1
Login to vote
Srikanth_Subra's picture

This artcile helped me lot to do the SNAC with SEPM already installed.

Thanks.

Thanks & Regards,

 Srikanth.S

"Defeat the Defeat before the Defeat Defeats you"
(Swami Vivekananda)

0
Login to vote
John Santana's picture

Hi,

What's the difference between "Network Access Control Starter Edition"

Filename: Symantec_Network_Access_Control_SE_12.1.1_MP1_Full_EN.exe
Version: 12.1.1 MP1
Description: Windows Base Product + Inline Update
 
and this one:
 
Filename: Symantec_Network_Access_Control_SE_12.1_RU1_Full_EN.exe
Version: 12.1 RU1
Description: Multi-Platform Inline Update

why there is starter edition ?

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

0
Login to vote
D@ry1's picture

Hi, can we do this the other way around? we have SNAC running but planning to add up the SEP functionality,.

Thanks,

+1
Login to vote
kintachi's picture

Hi,

May I ask, is this installation may resolve the issue on SNAC license? Thanks.

0
Login to vote
SolarisMaestro's picture

@kintachi, for Enterprise you will still need a SNAC license to be compliant and avoid getting license reporting alerts.

Thank you for marking as a solution if you felt this response met your needs!

0
Login to vote
XPlus1's picture

I've attempted to follow the instructions in this article, but every time I run setup.exe from the Symantec_Network_Access_Control_SE_12.1.2_Full_EN package i receive: "A newer version of Symantec Endpoint Protection Manager is already installed."  

We installed SEPM last week using the installer package: Symantec_Endpoint_Protection_12.1.2_MP1_Part1_Installation_EN.  There is no MP1 installation package  for SNAC listed in FileConnect.  Is the installation of SNAC possible using 12.1.2, or do I need to wait for a MP1 package?

0
Login to vote
RCMZZ's picture

XPlus1 please versify that you are in fact using 12.1.1 SEP, go to help and about in the SEPM to verify this.

D@ry1 Yes you can install SEP to an existing SNAC manager.

John Santana The difference is in your post, one is multi-platform and the other is just for windows, and the reason is someone might only want the windows platform edition (starter).

Chuck Edson No need to reboot server anymore unless directed by the installer.

To the rest please be sure to download the template policies via live update to be able to use the HI policies, you will get a warning if you have not done so and try to assign a HI policy. This can be done by going to the admin tab then select the local site and select "Download LiveUpdate content".

0
Login to vote