Endpoint Protection

Hi All,

Just curious is there such thing like 'auto-updating AV build' option exist in the market yet? I meant each time we do have maintenance or patch for AV build (ex MP1 or MP2 for Symantec), why don't they put an auto-update feature instead of manually updating it? and why not put this feature with GUP support as well

I knew we do have push deployment wizard tool exist..but still this feature will ease the job of admins..

Well this might sound dumb, i dunno... just want to know what others think

 

regards

Hi,

Suggestions are always welcome!

You can write your suggestions using product feedback link.

http://service1.symantec.com/DISCUSS/SUPPORT/feedback2.nsf/product+feed

Auto update of the client is already available within the console. You can have the clients download it from the management server or a different server. It can be configure to do a silent install or prompt the user to download the upgrade.

you can add it in ideas section of forum. There are few ideas on similar request, you may want to add your vote.

 

Hi thatdude,

Erm where can i find this option?

 

regards

once the client package is there, you need to manually schedule the upgrade to the groups. It is not automatic.

Hi,

You can post your ideas on forums using following link.

To create ideas:

https://www-secure.symantec.com/connect/node/add/idea?add_context=691

To view all ideas on forums please go through following link:

https://www-secure.symantec.com/connect/security/ideas

The reason that one must manually update the version of the SEPM is that many enterprise admins need to have complete control over when it is updated in a production environment. (SAV was like this too, for this same reason.) Of course, once the SEPM is updated you can automate the update of the clients (Upgrade Groups with Package). This has appeared at the bottom of every migration document since, I believe, MR1. See the following:

Migrating to Symantec Endpoint Protection 11.0.6200 (RU6 MP2)
http://www.symantec.com/docs/TECH145428

If this is something you feel strongly about and think others might too, it is definitely worth creating an Idea, for what it's worth.

sandra

Once you add the package and set a schedule it becomes automatic from there. Not sure why this isnt enough for admins...

I would like to know any reason behind the request, I always perfer to upgrade SEPM manually even there is one auto update available. The main reasons are

1) I do not update SEPM often, even there is a newer version released by Symantec, I will evaluate it to decide the fixes are necessary for my SEPM, or if this is just for the clients, then I can only import and export the client pacakge to upgrade the clients only.

2) I would like to have more visibility during the upgrade, there are countable management servers in the environment, thoguh it takes more time to upgrade manually, it is safe and easiler for me to troubleshoot the issues in case there are any, most importantly I do not want to lose my SEPMs if automated upgrade failed.

3) Upgrade SEPM need to break the replication if you have it configured

4) Upgrade requires proper sql account privilege, in the enterprise environment, the database team normally manages the SQL database, they remove some of the unnecessary operation privilege and you will need to request that at the upgrade time. 

In a large enterprise environment, you do not want your antivirus upgrading to new versions without lots of testing and planing.

Hi All,

I see several interesting input here, well actually the reason i asked is because whenever there's a bug or issue Symantec would always request to have the latest build on both SEPM and clients

It is understandable but will be quite problematic for large deployment. Again what i asked actually this feature is set to be optional. Would be interesting too if the GUP's can be provider for SEP client update purpose.

 

regards

You  can use GUP or any other server to be the provider for upgrade packages already...

http://clientui-kb.symantec.com/kb/index?page=content&id=TECH106181&actp=search&viewlocale=en_US&searchid=1297134091306

wow thanks... i didnt know about this one lol

Hi Cus000,

I agree to the idea of using GUP for distributing the package to the clients, because even I have received many such reqeust from the customer like you. I would suggest you to put this in the ideas section of the forums and let the product management decide whether to include the same or not. 

Regards, 

Nirav.