Endpoint Protection

Hi All,

Currently all our 13 centers of Symantec Endpoint Protection Servers are in Workgroup.

Please let me know the best practices for SEP server whether it should be in Domain or Workgroup.

Regards,

Ben

check this artical.

https://www-secure.symantec.com/connect/articles/best-practice-sep-installation-upgradation

https://www-secure.symantec.com/connect/forums/sepsepm-12x-best-practices-documents

Hi Manish,

We are not upgrading SEPM server and I only need the best practices for SEP server whether it should be in Domain or Workgroup environment. As currently we are in workgroup environment.

Check this.

ftp://ftp.symantec.com/public/english_us_canada/products/symantec_endpoint_protection/12.0_sbe/manuals/Best_Practices_SEPSBE12.pdf

Attachment(s)

Best_Practices_SEPSBE12.pdf   7.57 MB 1 version

I think u didn't get what I want here...

Check my Article on Best Practices

https://www-secure.symantec.com/connect/articles/best-practices-articles

hi

I think you want  how to you get secure in your work group server.

 https://www-secure.symantec.com/connect/forums/what-best-practices-client-settings-sep-11x

for SEP it does not matter whether you are on workgroup or domain. though with domain it would be easire to manage the machines using AD.

you should check SEP settings

Security Response recommendations for Symantec Endpoint Protection settings

http://www.symantec.com/business/support/index?page=content&id=TECH122943

Top 10 Symantec Best Practices - Deploying Symantec Endpoint Protection Architecture
http://www.symantec.com/docs/TECH92051

Best Practices for Installing Symantec Endpoint Protection on Windows Servers
http://www.symantec.com/docs/TECH92440 

Best Practices documents for Symantec Endpoint Protection 11.0 on Microsoft Small Business Server 2003
http://www.symantec.com/docs/TECH104584 

Best practices guide for installing the Symantec Endpoint Protection Manager (SEPM) on a Windows XP operating system
http://www.symantec.com/docs/TECH91694 

Best Practices for Central Deployment and Management of Symantec Endpoint Protection (SEP) in a Workgroup environment
http://www.symantec.com/docs/TECH91679 

Best Practices for Symantec Endpoint Protection on Citrix and Terminal Servers
http://www.symantec.com/docs/TECH91070 


SECURITY & THREATS

Security Best Practice Recommendations
http://www.symantec.com/docs/TECH91705 

Best practices for responding to active threats on a network
http://www.symantec.com/docs/TECH122466 

Security Response recommendations for Symantec Endpoint Protection settings
 http://www.symantec.com/docs/TECH122943 

Best Practice when Symantec Endpoint Protection or Symantec AntiVirus is Detecting a File that is Believed to be Safe
 http://www.symantec.com/docs/TECH98360 

Best practices regarding Intrusion Prevention System technology
http://www.symantec.com/docs/TECH95347 

REPLICATION

Best Practice for setting replication frequency
http://www.symantec.com/docs/TECH91509 


DISASTER RECOVERY and SQL

Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager
http://www.symantec.com/docs/TECH102333 

Best Practices to Backing up a Microsoft SQL Database on Demand from the Symantec Endpoint Protection Manager Console
http://www.symantec.com/docs/TECH96409 

Best Practices guide for Installing the Symantec Endpoint Protection Manager with a SQL Server 2005 Database
http://www.symantec.com/docs/TECH104405 

Best Practices guide for Installing the Symantec Endpoint Protection Manager 11 RU5 with a SQL Server 2008 Database
http://www.symantec.com/docs/TECH96451 

Best Practices guide for moving the Symantec Endpoint Protection Manager SQL Server database from one drive to another on the same machine'
http://www.symantec.com/docs/TECH106213 

Best Practices guide to moving the Symantec Endpoint Protection Manager SQL Server database from an existing SQL Server database to a new SQL Server database
http://www.symantec.com/docs/TECH104723 

LIVEUPDATE, SEPM, AND GUP UPDATES

Best Practices with Symantec Endpoint Protection (SEP) Group Update Providers (GUP)
http://www.symantec.com/docs/TECH93813 

Best practices for Group Update Provider (GUP) from Symantec Endpoint Protection MR3 or earlier builds
 http://www.symantec.com/docs/TECH105652 

Group Update Provider: Sizing and Scaling Guidelines
http://www.symantec.com/docs/TECH95353

Best Practices for configuring the number of content revisions to keep in Symantec Endpoint Protection Manager'
http://www.symantec.com/docs/TECH92225 

Best practice for configuring LiveUpdate when installing a Symantec Endpoint Protection Manager and Symantec Endpoint Protection client on the same machine.'
http://www.symantec.com/docs/TECH102337 

Best Practices for LiveUpdate Administrator (LUA) 2.x
http://www.symantec.com/docs/TECH93409 

CONFIGURATION

Best Practices for Changing a Client's Group Using the Endpoint Protection Manager Console
http://www.symantec.com/docs/TECH105324 

Best Practices for Symantec Endpoint Protection Location Awareness
http://www.symantec.com/docs/TECH98211 

Best Practices for file and folder scan exclusions are recommended when using QuickBooks 2006, 2007, 2008, 2009, 2010
http://www.symantec.com/docs/TECH97970 

Exclusion information for Microsoft Operating Systems, Functions, and Products are found on Microsoft's web site. Do a search for "exclusion" and "antivirus" for multiple product information on www.microsoft.com. If you are looking for a particular product, then add the product name to the "exclusion" and "antivirus" search criteria.

VIRTUALIZATION

Best Practice for Symantec Endpoint Protection Scheduled Scans in VMWare
http://www.symantec.com/docs/TECH95928 

Best Practices for Symantec Endpoint Protection integration with Workspace Virtualization (formerly SVS)
http://www.symantec.com/docs/TECH94157 

Best Practices for Symantec Endpoint Protection in virtual environments
 http://www.symantec.com/docs/TECH95300 
 

Hello,

Symantec Endpoint Protection is supported both type of Network's whether your network is Workgroup or Domain.

However, in your case, 13 servers located in different center. Could you also let us know - 

1) How many client machines would each of these servers be connected to?

2) Are these 13 servers carry independent SEPM machines or each connected via replication?

Incase, you choose Replication then you would require a Domain Network.

Here are Articles which may assist you to Install SEPM and SEP clients on Workgroup Network - 

Best Practices for Central Deployment and Management of Symantec Endpoint Protection (SEP) in a Workgroup environment

http://www.symantec.com/docs/TECH91679

How to install Symantec Endpoint Protection in a workgroup environment

http://www.symantec.com/docs/TECH105662

Which Communications Ports does Symantec Endpoint Protection use?

Hi Mithun,

Hi wanted to know whether it is recommended to Add SEPM server (SEPM Operating system) in Domain or Workgroup.

Symantec End point server being in Workgroup or domain environment has no major impact on the functionality of the product, how ever you can check the below article have listed down advantages and disadvantages of sep being in domain:

https://www-secure.symantec.com/connect/articles/advantages-and-disadvantages-active-directory-symantec-endpoint-protection-manager

There is no recommendation on this from Symantec, and If you planning to install on domain then the only one thing that you need to ensure that there should not be any GPOs applied on Symantec Services.

Hello,

You can surely Install SEPM on a Server which is either in Domain or Workgroup.

SEPM works absolutely without any issues on both type of networks.

The only thing you would require is a static IP address on this server.

Check this Articles:

System requirements for Symantec Endpoint Protection and Symantec Network Access Control 11.0.7

http://www.symantec.com/docs/TECH165172

System Requirements for Symantec Endpoint Protection, Enterprise and Small Business Editions, and Network Access Control 12.1

My concern resolved. Thanks all for your all suggestions.