Intelligent Live Update Capability in SEP SBE 12.0
SEP Small Business Edition 12.0 has a number of optimizations to ensure it “simply” works in a Small Business environment. One of the those features is the Intelligent live Update capability which I will discuss in this blog.
One of the key things that administrators struggle with is ensuring that all the endpoints within their company have the latest virus definitions, IPS signatures, and other updates. This becomes more challenging with users that don’t connect to the corporate network often enough to download the latest updates from the management server.
Some solutions that we have seen small business customers implement is to install “Unmanaged clients” on computers that are always on the road. Unmanaged clients get their updates directly from Symantec servers but these systems don’t report back to the customer’s management server. The challenge with this approach is that the administrator does not get a status nor can he control the policy on these unmanaged clients.
Some other administrators punch holes on their corporate firewall just so all remote endpoints can connect to the management server to stay updated. Clearly this utilizes precious WAN bandwidth and no one prefers punching holes in their firewalls.
With SEP Small Business Edition 12.0, we have introduced an Intelligent Live Update capability to solve this problem so the administrator does not have to compromise with the above approaches. With Intelligent Live Update, computers can still stay updated even if they don’t have a connection to the management server. The client is intelligent to check its communication with the management server. If not connected and if the updates are out of date by a day, the client attempts to download the updates directly from Symantec.
This gives the small business administrator the ability to continue to manage the endpoint while ensuring that it is always up to date (without always having to be on the corporate network). The client is pre-configured out-of-box with this capability so no additional configuration required to enable this capability. One small tidbit that will make your life a little easier…