Endpoint Protection

Hi, 

I have managed computer installed with SEP 12.1.3 and the definition will automatic update on certain of time if it is connect to other network; not HQ network. 

 

How definition update work? It will pull by my SEP from the computer or it push from Symantec server?

Any schedule push from Symantec server?

 

Thanks.

What policy do you have applied and how is it configured.

By default managed clients will pull updates from the SEPM. This cannot be scheduled but is done when the clients check in.

You can create a second location so that when they are off network they will get updates from Symantec.

How client computers receive content updates

Hope below articles help you How client computers receive content updates http://www.symantec.com/docs/HOWTO80888 Managing content updates http://www.symantec.com/docs/HOWTO80884

Check

https://www-secure.symantec.com/connect/forums/how-setup-symantec-endpoint-protection-client-update-schedule#comment-8450151

Hello,

Pull / Push Mode - You can specify whether Symantec Endpoint Protection Manager pushes the policy down to the clients or that the clients pull the policy from Symantec Endpoint Protection Manager. The default setting is push mode where client establishes a constant HTTP connection to the server. Whenever a change occurs with the server status, it notifies the client immediately. If pull mode is selected, then by default, clients connect to the management server every 5 minutes (according to set heartbeat), but you can change this default heartbeat interval.

Check these Articles:

Managing content updates

http://www.symantec.com/docs/HOWTO80884

How client computers receive content updates

http://www.symantec.com/docs/HOWTO80888

Symantec Endpoint Protection Manager 12.1 - LiveUpdate - Policies explained

http://www.symantec.com/docs/TECH178257

Regards,

Hi,

Thank you for posting in Symantec community.

I would be glad to answer your query.

Q. How definition update work? It will pull by my SEP from the computer or it push from Symantec server?

--> It can be either way, it's a part of configuration either Push Mode or Pull mode.

Q. Any schedule push from Symantec server?

--> You can't schedule push from Symantec server. But many customer prefer to update client definitions during midnight time. In such scenerio we do suggest to configure SEPM liveupdate in the midnight itself and configure clients in Push mode. As a result as soon as SEPM receives definitions it starts distribution.