Endpoint Protection

 View Only
  • 1.  Active Directory Domains in Sepm

    Posted Apr 24, 2012 09:32 AM

    We have recently aqcuired another company and they have Symantec Endpoint Protection ver. 11.
    We on the other hand do have an older version of Symantec System Center (ver.10)
    They are in their Active directory domain and we are in ours.

    Can we install their antivirus on our computers? 
    Can I create a domain in sepm and put our clients there and keep the other companys clients seperate in their sepm domain?

    best regards



  • 2.  RE: Active Directory Domains in Sepm

    Trusted Advisor
    Posted Apr 24, 2012 09:42 AM

    Hello,

    It is not possible to merge these 2 Consoles OR 2 different version of SAV 10 product and SEP 11.x product in 1 console.

    In your case, this could be possible if - 

    1) Purchase more Licenses for SEP 11.x clients

    2) Migrate the SAV clients to SEP 11.x clients.

    Secondly, check this Article:

    Be Aware: The Symantec Antivirus Corporate Edition 10.x and Symantec Client Security 3.x End of Support life is fast approaching!

    It is recommended that you create a Migration Plan of moving all the Client & Server machines to the Latest version of Symantec Endpoint Protection 12.1.

    Hope that helps!!

     



  • 3.  RE: Active Directory Domains in Sepm
    Best Answer

    Posted Apr 24, 2012 09:50 AM

    Hi,

    yes, you can.

    In the SEPM you can create a new domain to have a separated management of a set of clients even on a different AD domain. The only requirement is that your clients should be able to access to the SEPM in the other network, clients-SEPM communication is based on HTTP thru a web site installed in IIS.

    You can test HTTP connectivity in this way:

    in a client you want to check if it is able to contact the SEPM, open the browser

    enter http://<SEPM hostname>:<port 80 or 8014>/secars/secars.dll?hello,secars

    If you get "OK.", you should not have communication issues otherwise troubleshoot it as a standard HTTP connection to a web site in IIS.



  • 4.  RE: Active Directory Domains in Sepm

    Posted Apr 24, 2012 09:53 AM

    Sorry, was a bit unclear.

    I am fully prepared to just dump our old sav to the benefit of the newer version.
    There are licenses enough in the sepm ver. 11 to cover both companies.

    But as we are in different active directory domains and on different ip span,
    will it still be possible to use the sepm manager console to manage all the clients in both domains?

    It is possible to access each others servers and clients from the different domains, if you use ip adresses and have a valid domain login.

    Best regards



  • 5.  RE: Active Directory Domains in Sepm

    Posted Apr 24, 2012 09:58 AM

    Great.

    http://172.16.1.48:8014/secars/secars.dll?hello,secars gives me an ok.
    But not if I uses the hostname, guess it's a dns problem now.

    Will try and just edit the hosts file on a client tomorrow and try that out.

    Thank you for your help