Endpoint Protection

Hello people,

At the moment I'm in the process of creating the proper structure of Symantec Endpoint Protection server scanning policy, because having all server in one group and all workstation in one group is not enough granularity and setting for me.

So what is the best practice to follow to create SEP clients group in SEPM ?

Assuming all of the client has been all upgraded to the latest, does by moving client from one group to another cause any unwanted system restart ?

So what is the best practice to follow to create SEP clients group in SEPM ?

Best Practices for Creating Client Group Structure

http://www.symantec.com/business/support/index?page=content&id=TECH134409

Assuming all of the client has been all upgraded to the latest, does by moving client from one group to another cause any unwanted system restart ?

You may set your installation package to "no restart"so you can control it but it does not mean you can avoid it and the SEPM just reflects it.

 Migrating the SEPM would not require any reboots. However, when Migrating the SEP clients you may require a reboot of the SEP client machines. Network Threat Protection (firewall) drivers would require a restart of the machines to get themselves activated. However, these could be taken care off by creating custom package and avoiding the restart of machines.

Creating custom client installation packages in the Symantec Endpoint Protection Manager console version 12.1

http://www.symantec.com/docs/TECH165801

Hi,

You can move the clients to group..there wont be any issue..since you create the new group it will take the policies appliacble in the default..

So if there is any restart set in that policy for client deployement it will restart

Hello,

For, Best practice to follow to create SEP clients group in SEPM ?

You can add the groups that contain computers based on the level of security or function the computers perform. For example, you should put computers with a higher level of security in one group, or a group of Mac computers in another group.

Use the following group structure as a basis:

See How you can structure groups.

See Adding a group.

Assuming all of the client has been all upgraded to the latest, does by moving client from one group to another cause any unwanted system restart ?

No it would not require any unwanted System Restart.

I would recommend you these 3 Articles, which would answer all your Questions as it seems you are in creating the proper structure of Symantec Endpoint Protection server.

Planning the installation http://www.symantec.com/docs/HOWTO55061

Getting up and running on Symantec Endpoint Protection for the first time

http://www.symantec.com/docs/HOWTO55274

Network architecture considerations http://www.symantec.com/docs/HOWTO55114

Hope that helps!!

Many thanks people for the assistance !

I really appreciate and happy with this forum.

So my udnerstanding is that if there is no install package defined in the group tab, so the client shouldn't be upgraded eventhough the SEPM server is upgraded ? 

Yes. That's correct.

thanks for the clarification.