Endpoint Protection

Hi all, I need to install SEP on a 2008 R2 PDC server; what version of SEP works best and are there any best practises I should be aware of.

This 2008 R2 PDC has DNS, DHCP, Print and File server roles installed as well as BE 2010 R3 for backups.

Thanks you!

Install the lastest 12.1.5 with only Antivirus and Antispyware, 
Sonar and firewall shouldbe installed after proper testing only

these should help

Best Practices for Installing Symantec Endpoint Protection (SEP) on Windows Servers

I would suggest you go with 12.1.5 (the latest). You can install all components but I would only apply an AV policy.

If you want to move to IPS and firewall you can slowly test these out on some lower user servers. Then move to others as needed.

We are a non-ptofit and get soft at discounted rates, the website I download software has twp versions, SEP and SEP smal business edition. Could you please tell which one of those two i should get and why in my case?

Thanks!

The differences are outlined here:

https://www-secure.symantec.com/connect/articles/difference-between-symantec-endpoint-protection-121-symantec-endpoint-protection-sbe-2013-a

Basically SEP SBE is for small companies meaning fewer than 100 employees.

At it's basic level it contains antivirus, intrusion prevention, and a firewall. These are the minimum you would need to secure your business and will probably work best for you. Review the requirements and let me know if you have questions.

The Small Business Edition has these extra features that i don't think I would ever use on a DC. Could these extra features cause pottential issues on a DC vs just those included with SEP?

Its possible but you could also disable them if not needed

Do not install without proper testing, for safer side always install AV/As, if you if you are not using much features you can always go with SMB version. for Desktops SEP ent is good.

Just ordered regular version for 250+ employees, will give it a try.

Thanks!

Thanks! I will try the SEP full version first, would you recommend unchecking all features during the instal except for AV/AS?

You can install them, just hold off on applying a policy for IPS and the firewall right away

Hi Brian, I remember not too long ago with an older version of SEP I had problems when it was blocking Canon imager runner drivers on a 2008 R2 print server preventing workstations from getting device status info fron the print server. Are there any features that need to be disabled after installation or that issue has been resolved with newer realeases of SEP? I just downloaded the latest 12.1.5 and planning to instal on a 2008 R2 PDC that also has a print and file server roles installed on it.

Thank you!

Where you using the firewall as well?

Nope, wasn't using the firewall feature. As soon as I uninstalled that particular version of SEP the printer started to work. It is a Canon iRA 7260 with PCL5c 64-bit latest realease driver that I use on the print server and that is being deployed via GPO to all our workstations.

Just want to make sure I won't have any issues after the installation of 12.1.5 SEP as in most cases it requires a PDC reboot.

Thanks!

Do you know what version it was running?

Could be 12.0.1 but im not 100% sure. It was installed around Aug. 2011. Most likely the most up to date version available at that time for download.

Very old and I believe end of life. May want to try 12.1.5