Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Creating Client Packages with Latest definitions

Updated: 13 Oct 2010 | 19 comments
susanthas-123's picture
0 0 Votes
Login to vote
Hi Everyone,
 
My main problem is how to create a SEP client packages with latest definition intergrated. Currentley I'm deploying MR1 release in client side and whenever I install the server and update and create the Client packages they are still having the AV definition December 17 2007!!!
 
This is not feasable when I deploy the client package to branch office and client getting update via the VPN link. I hope someone in the forum or one of the Symantec engineer will provide a resonable answer for me.
 
Cheers,
Susantha

Comments

susanthas-123's picture
27
Mar
2008
0 Votes 0
Login to vote

Hi guys/gals,

Strange to find no one has come across this problem or is it correct to guess that everyone is having faster VPN connection to branch offices? Fingers crossed hoping at least someone will over look into this matter at least one and shed a light.

Cheers

reza akhlaghy's picture
27
Mar
2008
0 Votes 0
Login to vote

Hi,
 
After some investigation I find something that may work, but it requires Symantec employees verification:
 
in the INETPUB\CLIENTPACKAGES\<some numbers>\full
 
which is your base files for installation there's file called vdefhub.zip that its content is exactly the same of content of \Program Files\Common files\symantec shared\virusdefs\<date> and I think if you zip that folder's content and replace vdefhub.zip with it, the next installation will be with latest virus definitions.
 
If you dont want to mess with client install packages, export a package and do not check "create single exe file" and then you'll find that vdefhub.zip in exported installation.....
 
Gerbster's picture
28
Mar
2008
0 Votes 0
Login to vote

This is an excellent suggestion and works like a top.  I zipped up the latest defs and named the zip file "vdefhub.zip" as you suggested.  After replacing the orginal zip with this new zip file I created, the new client installs went in with the most current defs right from the start.  The cut the downloading time to almost nil and solved one of the remaining irritations about this new AV product.
susanthas-123's picture
28
Mar
2008
0 Votes 0
Login to vote

Hi Guys,
 
Thank you all. Well the last 2 post are correct. It has been confirmed by Symantec as well. Let me pass their message as it is for all your concern.
 
 Question/Issue:

 

When you create an installation package with SEP, it deploys with old definitions. You would like to deploy with the latest definitions to minimize network traffic.

 

 

> Solution

 

 

1.  Update the SEP Manager either by running Liveupdate, or downloading the JDB file to the \Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\incoming directory

2.  Copy the latest definition file (FULL.ZIP) from the SEP manager and replace it with install package

Go to the following directory on the manager C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{C60DC234-65F9-4674-94AE-62158EFCA433}

3.       Open the latest definitions folder

4.       Locate the FULL.ZIP file.

5.       Delete the existing vdefhub.zip from the installation package.

6.       Copy and rename the FULL.zip to VDEFHUB.ZIP from the manager’s definition folder to the Install package.

7.       Install the package on the client.

fjorq's picture
20
May
2008
0 Votes 0
Login to vote

Has anyone been able to do this using the single executable option?
Substituting the full.zip for the vdefhub.zip works great for packages.  The only problem is that the package is double in size (approx. 125MB) as compared to 68MB using the setup.exe single executable option. 
I have not found a way of integrating up-to-date defs inside the setup.exe.
 
Any ideas?
cable mite's picture
21
May
2008
0 Votes 0
Login to vote

fjorq did you get any solution for this? I am looking for the same thing as I need to deploy over low bandwidth links.

------------------------------------------------------------
MR99 will fix it all.

susanthas-123's picture
21
May
2008
0 Votes 0
Login to vote

Hi Guys,

I didn't find a solution to that either. I just zip that folder and send it to the destination place and after that do the installation. But I guess you can use third party software to create exe or msi packages.

Paul Murgatroyd's picture
26
May
2008
0 Votes 0
Login to vote

we have an internal solution to this, let me see if I can post it...
 
We are going to fix it properly though, no ETA yet tho.

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

reza akhlaghy's picture
26
May
2008
0 Votes 0
Login to vote


Paul Murgatroyd wrote:
we have an internal solution to this, let me see if I can post it...
 
We are going to fix it properly though, no ETA yet tho.


Hi Paul,
 
I've an easy suggession for fixing that, just in the export mechanism, collect current virusdef
and put it inside of installation. It will cover most of our needs.
Paul Murgatroyd's picture
26
May
2008
0 Votes 0
Login to vote

yep, but there is more to it than that :smileyhappy:
 
we have a few other use cases too... we even have customers who want to create packages without content - I think we are looking into the option of a tick box that says "include content" or something similar.
 
In addition, we are also looking at what files we include in a delta client update... at the moment we include a full set of content... which we don't really need to...

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

Bekir's picture
02
Jul
2008
0 Votes 0
Login to vote

Is there any internal documents that can give us a clue about this subject? I guess the setup.exe is already a self-extracting file isn't it? there should be a little trick to clarify, that's all, but what?

Best regards,
Bekir Burak Durmaz

Bekir's picture
02
Jul
2008
0 Votes 0
Login to vote

Well, I've realised that I can open and view but cannot change the ingredients of the setup.exe by using winrar. However, I can extract the package to a folder, change whatever I want and create a SFX again by using winrar. Is there anything extra that I need to do while doing this? Any ideas?

Best regards,
Bekir Burak Durmaz

Glitch's picture
22
Aug
2008
0 Votes 0
Login to vote

Is there any update on how to put the latest definition files into an Exe package ?

I need a solution before rolling out on all my clients, to avoid warning telling everyone that the definition files is outdated, or maybe there is a solution to that one ?

Mrkrad's picture
22
Aug
2008
0 Votes 0
Login to vote

would it be horrible to just have your SEPM create new packages on a schedule. say once a day rebuild them as we define them to include the latest defs?

 

I mean we've already devoted a 2GB ram IIS server to the task so setting it up to remake the export at night when nobody would be installing would be kind of nice.

 

I've just been kind of doing that periodically anyways. If i change policies i just make a whole new install so the new policies and virus defs are just there.

 

Is that a bad idea?

Cormac's picture
04
Jun
2009
0 Votes 0
Login to vote

Any news on this post about

Any news on this post about the *add content* button or similar?

Thanks

OD's picture
04
Jun
2009
0 Votes 0
Login to vote

I'm keen to know if the

I'm keen to know if the full.zip packages are different for 32bit and 64bit. I can see that they do not have the same size on my server

ikemay's picture
12
Feb
2010
0 Votes 0
Login to vote

That link is very helpful.

That link is very helpful. Thanks!

kimooo2's picture
12
Apr
2010
0 Votes 0
Login to vote

File Size

Hi everyone, regrding the file size you can use 7zip a free tool.