Video Screencast Help

Compatibility with DC and Exchange server SEP 12.1.3

Created: 17 Jul 2013 | 8 comments

Am going to upgrade SEP RU5 to 12.1.3. I want to know the list of compatibility issues for below items with SEP12.1.3 or SEP will not cause any issues..

  •          Domain controller
  •          Exchange Servers

Apart from above two ,If you can find out a detailed list of applications which have compatibility issues with SEP 12.1.3 will be highly appreciated.

Any documents  related to this is much appreciated.

Thanks in Advance  :)

Manikandan K

Operating Systems:

Comments 8 CommentsJump to latest comment

Brɨan's picture

When SEP is installed, it will detect DC and Exchange and add necessary exclusions.

See KBA here:

http://www.symantec.com/docs/HOWTO80947

About the automatic exclusion of files and folders for Microsoft Exchange server and Symantec products

padding: 1px;padding-bottom: 3px ;font: 12px Arial; text-align: left;">Article:TECH102400 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 0px;font: 12px Arial; text-align: left;">Created: 2007-01-02 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 1px;font: 12px Arial; text-align: left;">Updated: 2013-06-06 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 1px;font: 12px Arial; text-align: left;">Article URL http://www.symantec.com/docs/TECH102400

Also, you may want to start with only AV component on servers:

Best Practices for Installing Symantec Endpoint Protection (SEP) on Windows Servers

padding: 1px;padding-bottom: 3px ;font: 12px Arial; text-align: left;">Article:TECH92440 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 0px;font: 12px Arial; text-align: left;">Created: 2009-01-18 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 1px;font: 12px Arial; text-align: left;">Updated: 2013-06-18 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 1px;font: 12px Arial; text-align: left;">Article URL http://www.symantec.com/docs/TECH92440

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Rafeeq's picture

No issues. It will automatically exclude exchange and dc related files

About the automatic exclusion of Active Directory files and folders

http://www.symantec.com/business/support/index?page=content&id=HOWTO27179

 

Does the upgrade of a Server to a Domain Controller Automatically create the necessary exception for the Active Directory ?

http://www.symantec.com/business/support/index?page=content&id=TECH95886

Mithun Sanghavi's picture

Hello,

Yes, you can install the Symantec Endpoint Protection 12.1 on the Domain Controller as well as Exchange Server.

File and folder exclusions which are Excluded are -

  1. Microsoft Exchange
  2. Microsoft Forefront
  3. Active Directory domain controller
  4. Certain Symantec products
  5. Selected extensions and Microsoft folders
  6. File and folder exceptions
  7. Trusted files

Check these Articles:

Best Practices for Installing Symantec Endpoint Protection (SEP) on Windows Servers

http://www.symantec.com/docs/TECH92440

About the files and folders that Symantec Endpoint Protection excludes from virus and spyware scans

http://www.symantec.com/docs/HOWTO80947

About the automatic exclusion of files and folders for Microsoft Exchange server and Symantec products

http://www.symantec.com/docs/TECH102400

Hope that helps!!

Mithun Sanghavi
Associate Security Architect

MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Beppe's picture

Dear Manikandan,

to say if an application like SEP is compatible or not with another application, a test has to be done by our own testers. This is of course done for most common applications and configurations like DC's and Exchange servers but even for them there are some many possible combinations of settings that it is not possible to guarantee that all of them are OK for SEP.

You may find know issues and workarounds in release notes:

http://www.symantec.com/business/support/index?pag...

Regards,

Giuseppe

Chetan Savade's picture

Hi,

Thank you for posting in Symantec community.

I would be glad to answer your query.

SEP is intelligent software even though you installed it on critical servers like Exchange, Domain Controllers, ADC etc. It will make necessary exclusions automatically.

Prior to install SEP 12.1 RU3 check the System requirements. Only make sure you are installing on supported operating systems.

SEP 12.1 RU3 is the latest version so latest operating systems are supported however it's worth to check before installing.

Here is the link: http://www.symantec.com/docs/TECH195325 

Exchange Server 2013 and Windows Server 2012 both are supported with this release.

Check this :  http://www.symantec.com/docs/TECH102400

You can do the following test in test environment.

  • Check Windows server backup is working correctly or not?
  • Check the Server performance.
  • Monitor the event viewer.

Second important thing is to test firewall settings if NTP is installed on server operating systems.

There are few enhancement in the firewall rules so test that as well.

With this testing you can decide how to proceed on this.

About the automatic exclusion of files and folders for Microsoft Exchange Server and Symantec products

http://www.symantec.com/docs/TECH102400

About the files and folders that Symantec Endpoint Protection excludes from virus and spyware scans

http://www.symantec.com/docs/HOWTO80947

Best Practices for Installing Symantec Endpoint Protection (SEP) on Windows Servers

http://www.symantec.com/docs/TECH92440

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

kennethSEPnewbie's picture

Hi, I am Kenneth Uy and I am new to this forum.  Just a quick question.

How can I integrate Symantec Endpoint Protection with Active Directory:

SEP Version: 12.1.3 Small Business Edition (RU3 if not mistaken)

OS: Windows 2012 Server

Case:

A client is asking if I can configure their Symantec Endpoint Protection Manager be integrated with their Active Directory, supposedly, it is a "YES", when I tried to login to the management console and will start the AD integration process, I found out that the "Directory Server" tab under the Server Properties is not present.

I tried to access a another server from a different client, the version is 12.1.671 / RTM, this time I was able to see the "Directory Server" tab under the Server Properties.

Question here is, how can I integrate the SEP to Active Directory if the "Directory Server" is not present? 

Note: Client is using SEP 12.1.3 (RU3)

Your answer(s) is highly appreciated and hope this is the correct thread to post this question.

Regards.

/kenneth

Chetan Savade's picture

Hi Kenneth,

I would like to answer your query.

You can integrate Active directory with the SEPM is it's a Enterprise Edition (EE).

It's not possible with Small Business Edition (SBE)

About your second question, how can I integrate the SEP to Active Directory if the "Directory Server" is not present?

--> If directory server is not present then you can't integrate with even Enterprise Edition.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

James007's picture

Hi,

SEP Small Business edition does not integrate with AD