Endpoint Protection

Hi guys im new to Endpoint and just have a quick question. I have installed the manager console and have rolled out the client install to a few of my machines so all is ok but how do I install the server.

With older versions of symantec there was a client install and a server install are they both the same now as cant seem to find a sever install only a client one?

Thaks

Now server install installs the manager and clients are installed managed by installing packages . As you are saying the manager is already instaled and clients are installed i did not understnad what is wrong then

Well I have installed the manager console onto the server but is that all I need to do or do I need to run the client install on the server as well?

yes, server install is different, you need to install client to protect the machine from malware.

Pete!

ok so I need to install the client onto the server excatly the same as I do for the clients? Not like older versions of Symantec where there was 2 different installs one for the clients and one for the servers?

click on setup.exe it will ask to install SEP client, select the thing and follow on screen instructions.

SEPM is to manage the clients where policy all can be configured. BY installing SEPM, the box is not protected.

Pete!

pete pretty well answered, but just to reiterate or rephrase in case of language barriers:
SEPM - Symantec Endpoint Protection Manager - that's just the manager part. No antivirus included. It's akin to the SAV console, but much much more power. Stil, it's only management.

SEP - Symantec Endpoint Protection. There's only one sort of install and it's referred to generically as client, although it is to be installed on SERVERS or CLIENT computers. There's no difference with SEP.

With SAV there was a difference - the server install had no email checking, and it was prepared to be a parent to children.
With SEP, protections are optional - such as email protection, and so on, and you choose when you install or build install packages. But any install you build is for servers or clients.

SEPM is like or takes the place of the SAV control console. The management is just that, no protection
SEP is like or takes the place of SAV client AND SAV server - sep installs to both servers and/or clients and can be installed managed or unmanaged.

You can choose to install only AV, or AV And firewall, or av and firewall and proactive threat protection, etc.
For clients depending on your enterprise and needs, I suggest installing it all.
for servers, that's up to you - but here, I install ALL of it, the full package is running on all of our servers, DCs included. AV, firewall, PTP, the whole bit. I don't get as radical on the rules for the servers - the firewall is more simple and servers are in a different group here for distinct management.
Clients I get REALLY radical - we have different groups based on how tight I make the protection.

Thats brilliant thanks for the reply thats cleared it up for me. I was guessing this was the case but it threw me slightly by saying client install  so didnt want to put it on my servers if it was the wrong thing!!

Thanks again.

I installed SEPM 11.4202 MR4 MP2 on Win2k3 Ent Server, however I'm unable to login. When adding the userid and password the SEPM service stops.  I attempted to uninstall and reinstall and change the port from 8005 to 8006, unsuccessful.  Request assistance resolving the issue.

Jun 4, 2009 9:28:44 AM org.apache.coyote.http11.Http11BaseProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-9090
Jun 4, 2009 9:28:44 AM org.apache.coyote.http11.Http11BaseProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-8443
Starting service SCM
Apache Tomcat/4.1.37-LE-jdk1.4
Has valid SAV license
Info>> No SNAC license file in D:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\license
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: ================== Server Environment ===================
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: os.name = Windows 2003
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: os.version = 5.2
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: os.arch = x86
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: java.version = 1.5.0_14
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: java.vendor = Sun Microsystems Inc.
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: java.vm.name = Java HotSpot(TM) Server VM
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: java.vm.version = 1.5.0_14-b03
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: java.home = D:\Program Files\Symantec\Symantec Endpoint Protection Manager\jdk\jre
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: catalina.home = D:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: java.user = null
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: user.language = en
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: user.country = US
Jun 4, 2009 9:28:44 AM com.sygate.scm.server.util.ServerLogger writeHeader
SEVERE: scm.server.version = 11.0.2000.1567


2009-06-04 09:24:09.852 SEVERE: ================== Server Environment ===================
2009-06-04 09:24:09.852 SEVERE: os.name = Windows 2003
2009-06-04 09:24:09.852 SEVERE: os.version = 5.2
2009-06-04 09:24:09.852 SEVERE: os.arch = x86
2009-06-04 09:24:09.852 SEVERE: java.version = 1.5.0_14
2009-06-04 09:24:09.852 SEVERE: java.vendor = Sun Microsystems Inc.
2009-06-04 09:24:09.852 SEVERE: java.vm.name = Java HotSpot(TM) Server VM
2009-06-04 09:24:09.852 SEVERE: java.vm.version = 1.5.0_14-b03
2009-06-04 09:24:09.852 SEVERE: java.home = D:\Program Files\Symantec\Symantec Endpoint Protection Manager\jdk\jre
2009-06-04 09:24:09.852 SEVERE: catalina.home = D:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat
2009-06-04 09:24:09.852 SEVERE: java.user = null
2009-06-04 09:24:09.852 SEVERE: user.language = en
2009-06-04 09:24:09.852 SEVERE: user.country = US
2009-06-04 09:24:09.852 SEVERE: scm.server.version = 11.0.2000.1567
2009-06-04 09:24:10.727 SEVERE: ================== StartClientTransport ===================
2009-06-04 09:24:10.759 SEVERE: Unknown Exception in: com.sygate.scm.server.servlet.StartupServlet
java.lang.Exception: HTTP 400 Bad Request, URL: http://localhost/secars/secars.dll?action=34
at com.sygate.scm.common.communicate.Communicator.getRequestInputStream(Communicator.java:548)
at com.sygate.scm.server.util.ClientTransportHelper.startClientTransport(ClientTransportHelper.java:72)
at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:99)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:880)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:768)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3484)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3710)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:697)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:311)
at org.apache.catalina.core.StandardService.start(StandardService.java:450)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:2213)
at org.apache.catalina.startup.Catalina.start(Catalina.java:484)
at org.apache.catalina.startup.Catalina.execute(Catalina.java:371)
at org.apache.catalina.startup.Catalina.process(Catalina.java:134)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:151)
com.sygate.scm.common.communicate.CommunicationException: Unexpected server error. ErrorCode: 0x10010000
at com.sygate.scm.common.communicate.Communicator.getRequestInputStream(Communicator.java:569)
at com.sygate.scm.server.util.ClientTransportHelper.startClientTransport(ClientTransportHelper.java:72)
at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:99)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:880)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:768)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3484)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3710)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:697)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1148)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:311)
at org.apache.catalina.core.StandardService.start(StandardService.java:450)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:2213)
at org.apache.catalina.startup.Catalina.start(Catalina.java:484)
at org.apache.catalina.startup.Catalina.execute(Catalina.java:371)
at org.apache.catalina.startup.Catalina.process(Catalina.java:134)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:151)

Hmmm...  You are running SEP11 MR2.

It is going to be mentionned , so might as well say it.  Recommend connecting to file connect and downloading MR4 MP2.  Run the upgrade on the SEPM (manager/console) and update your Java version.

Once that is done, let us know if you are still having issues.

Thanks

U need to run the client install as well, but that client should be managed client pakage

The logs you have posted above, indicate the HTTO 400 bad request error, which means that you should probably try a repair install before the upgrade.

Please let us know if the upgrade to MR4MP2 was able to resolve this issue.

Cheers,
Aniket

Hi

I have a quick look at the SEPM and SAV

SAV Components

1) Symantec Antiviru Server (Primary and Secondary) 
Every network needs a AV server to manage all the Clients.

2) Symantec Antivirus (client) protection for Files and Folders.
which gets installed in all the Windows workstations and Servers ex: File, Mail, DC servers.

3) Symantec System centre console (SSC)
SAV server manages all the clients thru SSC. Where File auto protect, Live update, Tamper protection or other options are configured and managed.

SEPM Components

In this new version there is no Antivirus Server.

There are only two components:
1) SEP Client => same as SAV client but this has the latest techonolgy with in.
This has the new componets like Firewall, Application and Device Control, Proactive Threat protection, Rootkit and Intrusion Prevention system.
(It has integrated the best products of Sygate (firewall), Vertias Rootkit, Whole confidence)

2) SEPM => This plays a Major role as there is no Antivirus server.

In SEP 11 you need to install the SEPManager  form where you can install sep clients and configure them. (similary to SSC)

Note: In this version as there is no AV server, even the system with SEPM also requires a client to protect its local files and folders.

You can install SEP client on any windows systems i.e., Win 2000 SP4 and above
(Check the system requirements)

It doesn't depend whether it's your file server,  mail server or local desktop. Only the policies changes.