Video Screencast Help

How and where can I add new SNAC package for the latest 12.1 RU1 MP1 ?

Created: 18 Sep 2012 • Updated: 19 Nov 2012 | 14 comments
This issue has been solved. See solution.

Hi,

Can anyone please assist me in locating and importing the latest SNAC package for the latest client version 12.1 RU1 MP1 ?

AS I ahve just upgraded the SEPM into v 12.1 RU1 MP1.

Thanks

Comments 14 CommentsJump to latest comment

pete_4u2002's picture

there is no different package for SNAC, the SNAC component gets installed with the SEP. Once the license is activated you can start the SNAC services and apply HI policy.

you can verify by checking the services.msc for Symantec Network Access Control

John Santana's picture

Thanks for the response guys,

when I go to the Fileconect website, I got confuse between the following two files:

 

Filename: Symantec_Network_Access_Control_SE_12.1.1_MP1_Full_EN.exe
Version: 12.1.1 MP1
Description: Windows Base Product + Inline Update
 
Filename: Symantec_Network_Access_Control_SE_12.1_RU1_Full_EN.exe
Version: 12.1 RU1
Description: Multi-Platform Inline Update

which one should I download and install in order to get the SNAC enabled for my SEPM v 12.1 RU1 MP1 ?

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Ashish-Sharma's picture

You can download

Filename: Symantec_Network_Access_Control_SE_12.1.1_MP1_Full_EN.exe
Version: 12.1.1 MP1
Description: Windows Base Product + Inline Update
 
I am already says Same version required
 
The Symantec Endpoint Protection Manager (SEPM) and Symantec Network Access Control (SNAC) need to be running the same version and build.   

Check this artical.

http://www.symantec.com/business/support/index?page=content&id=HOWTO31159

 

Check this thread

https://www-secure.symantec.com/connect/forums/snac-install-confusion

 

Thanks In Advance

Ashish Sharma

 

 

pete_4u2002's picture

is it upgrade of SEPM or fresh install?

if fresh then ru1 mp1, then you need to check the supported migration guide

SEPM --> 12.1 ru1 ---> 12.1 ru1 mp1.

John Santana's picture

Pete it was after the upgrade of the SEPM,

now as I understand is that I must keep the version of SEP client and SNAC client the same as the SEPM server, hence I create this thread to make sure which one that I need to install.

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

pete_4u2002's picture

yes, :-). if everything's on SEP 12.1 RU1 then download RU1 mp1 if you are going to upgrade.

John Santana's picture

Thanks for the clarification Pete, somehow the Product description says that it is "Network Access Control Starter Edition"

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

pete_4u2002's picture

Self-Enforcement is the only SNAC enforcement option that is included with SPS EE. If you want to do any other kind of enforcement (such as NAP, Gateway, or LAN) they need to license SNAC, either Starter Edition or full as appropriate.

the others will be appliance for DHCP, Gateway.

John Santana's picture

Hm... that is why I'm confused, why the latest edition of my SNAC server is just the starter edition not the proper full license as in my SNAC v 12.1 RU1 ?

I'm going to use SNAC to prevent the computer in using Wireless LAN Controller or any USB WLAN adapter while connected to the network, I guess that I'll need LAN enforcer :-|

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

pete_4u2002's picture

the license for appliance is different.

You can still use the SEPM host integrity policy, however check if it meets, if not then you should be thinking of LAN enforcer or DHCP.

check the implementation guide

John Santana's picture

thanks guys !

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

olivierdon's picture

Great topic discussion gentlemen. But I am still not following the entire big picture here in reference to Host Integrity validation for any host on the network. Here is my situation that I would like to address. We recently attempted to upgrade to 12.1 - didn't work. We are planning a new install this thursday with an embedded DB. This is what I would like to do and don't know the best way to:

1. I need to verify Host integrity for my wireless users before I allow them on the network. Do I enforce validation at the DHCP or do I do it at the client that is installed on their laptop. What if they don't have the client installed

2. I need to verify Host integrity on the wired side which does not have a DHCP (everything is static). Can it be done some other way without any impact to the existing network.

3. Can I keep the two separate without impacting too much.

Thanks.

SOLUTION