Endpoint Protection

Hello,

I have installed the SEPM on a Windows 2008 Server.  I have created an install package on a network share and can install from there a Managed Client.  Additionally I can Push a Managed client to an unmanaged machine.  However is it best practice/necessarry to install a client on the SEPM?  Which I swear I read however I can't rememer where OR What I read was the best practice.

If so do I install a Managed client, Unmanaged client, etc.?

If it is managed do i use the network share or do I Push the client?

Thanks for reading and hopefully responding

Check this Best Practice -

Best Practices for Installing Symantec Endpoint Protection on Windows Servers

http://bit.ly/lUplqf

Hello,

Yes, You have to Install SEPM and SEP on the same server machine. SEP would be installed as Managed Client and so the others.

Check these Symantec KB articles:

1) Installing the product for the first time

http://www.symantec.com/business/support/index?page=content&id=TECH92440

install it as managed; same like others

Hi,

Your server is currently without any protection if your windows firewall is turn off.

Question : If so do I install a Managed client, Unmanaged client, etc.?

Ans : Install it as a Managed client

Question : If it is managed do i use the network share or do I Push the client?

Ans :  Manually run setup.exe on server by selecting required features (AV /AS, PTP / NTP).

PTP is not supported on server operating systems even you installed it will remain in OFF mode.

Yes, you should.  The SEPM offers no actual threat protection.  It is a central management/reporting console.  You need to install the SEP client on it for protection.  It should be a managed client.

Great information. Everyone, sorry been really busy to respond I will go through these and take in to account all of your great responses. Thanks for the input should be able to respond today.

Okay guys I don;t know how to reward all of you because A) You were right; B)I had to tweak the solution.

I got a jvm console-1 or something of the sort when I ran my PUSH to the SEPM.  So I ran the Setup.exe, Cannot install as a Managed Client cme up during run.

So I installed an unmanaged client and replaced Sylink.xml with a correct/managed Sylink.xml.  WORKED PERFECTLY.

Hi.

You can reward the people by voting up their comments. They won't get the full 35points for the answer, but at least it'll show that somebody agreed with their comments.