Endpoint Protection

Just downloaded SEP 12.1.4 earlier this morning, double-clicked the dmg file to get to the SEP installer which I then ran on a Mac Mini (OS X 10.7 with SEP 12.1.2, unmanaged).  I opted for an unmanaged custom install after which I chose NOT to load NTP as is usually the case for our Windows clients.  The install went without a hitch although when I opened up the SEP GUI, it showed NTP enabled with PTP no where in sight.

I thought, OK, maybe I made the wrong selection going through the custom install so I proceeded to run the Symantec Uninstaller from the Symantec Uninstaller.app.tgz file which completed successfully.  Then I reran the same SEP installer but this time around, it didn't stop to ask me whether I wanted a typical or custom install.  It's as though the Mac remembered the previous installation settings and just used those options.  I wanted to go through the custom install again to confirm that I had unselected NTP but can't even get to this point again.  I'm not too familiar with Macs so hoping the community can shed some light as to what's going on.

Hello,

As far as I know only Antivirus and Antispyware feature would be getting installed on the SEP for Mac.

Client protection features by platform

http://www.symantec.com/docs/HOWTO80873

Hope that helps!!

Unless it's a red herring, I definitely saw Network Thread Protection in the SEP 12.1.4 GUI on my Mac Mini even though I had unselected this component while doing a custom install.  Also saw the Proactive Threat Protection component in the installer tree and even the install process looks different than the previous 12.1.2 version from the 12.1.3 distribution.

I tried uninstalling 12.1.4, reinstalled 12.1.2, uninstalled 12.1.2 then reinstalled 12.1.4 where I was again NOT given the choice to do a typical or custom install.  As before, the Status in the main SEP GUI shows components "Virus and Spyware Protection", "Network Threat Protection" and "LiveUpdate".  The Mac appears to be retaining previous SEP install info to bypass offering a custom install option so how do I get things back to a clean slate?

The installer is definitely very different than in previous releases. I did not do a custom installation when I installed, so I have not seen the screen you describe.

Proactive Threat Protection (PTP) is not a part of the SEP Mac client. Network Threat Protection (NTP) is currently intrusion prevention only--there is no firewall as part of the SEP Mac client.

My suggestion would be to try RemoveSymantecMacFiles. It has been verified to work with SEP 12.1.4.

Removing Symantec programs for Macintosh by using the RemoveSymantecMacFiles removal utility
http://www.symantec.com/docs/TECH103489

If you can get to that screen again where you saw options to not load NTP, please take screenshots.

Thanks, and I hope this helps.

sandra

I guess this explains why I don't see PTP in the SEP GUI.  However, weird that when I went through the Custom install, it allowed me to uncheck NTP and leave PTP checked but in the end I ended up with NTP instead on the Mac.

Anyhow, I have since tried RemoveSymantecMacFiles although am not able to reproduce what I saw in my original 12.1.4 install where I had 12.1.2 loaded and just fired off the installer from the 12.1.4 dmg file.  Again, no matter what I do now, the 12.1.4 install doesn't even offer me a Typical or Custom install and simply prompts me to install and restart.  Can anyone confirm that with a fresh install of 12.1.4 whether a Custom option is even presented to you?

Had a co-worker install SEP 12.1.4 on his Mac Mini which, unlike mine, didn't have an older version of SEP already loaded.  Similar to my last installs, it didn't give him a Typical/Custom option so I'm wondering whether my first upgrade from 12.1.3 to 12.1.4 was an anomaly?  Also, NTP is shown in his SEP GUI as well.

It really does sound like an anomaly. Did you recall if you were installing a managed or unmanaged client?

I'm not aware of any way to customize the installation to only install AV--I don't even think that's a possibility in creating a managed client in the SEPM--but you can disable IPS through policy in a managed Mac.

sandra