Endpoint Protection

I perform remote push to install symantec endpoint 12.1 antivirus to computers. If I want to install the intrusion prevention or firewall or application device control modules (features) later on, do I need to do another remote push install to the computers? Is there an easier way ??

check this link

How to add or remove features to existing Symantec Endpoint Protection (SEP) client installations

http://www.symantec.com/business/support/index?page=content&id=TECH90936

You can also use the below link, this can be scripted.

http://www.symantec.com/business/support/index?page=content&id=TECH102668

Hello,

I would advice you to follow the Auto-upgrade feature.

Check this Article:

Upgrading clients by using AutoUpgrade

http://www.symantec.com/docs/HOWTO17911

Check this Article and Video below:

Upgrade clients to SEP 12.1 by Auto upgrade feature

https://www-secure.symantec.com/connect/articles/upgrade-clients-sep-121-auto-upgrade-feature

Upgrade clients to SEP 12.1 using Auto upgrade feature

https://www-secure.symantec.com/connect/videos/upgrade-clients-sep-121-using-auto-upgrade-feature

Hope that helps!!

Hi,

Remote push is one of the available option but auto upgrade is more easy to use.

http://www.symantec.com/docs/HOWTO17911

To modify installed features for managed clients

1. In Symantec Endpoint Protection Manager (SEPM), click Admin.
2. Click Install Packages on the bottom.
3. Click Client Install Feature Set on the top.
4. If a feature set that meets the required needs does not exist, then choose Add Client Install Feature Set.
5. Give the feature set a unique name.
6. Select the features needed (Antivirus/Antispyware, Network Threat Protection, Proactive Threat Protection).
7. Choose OK.
8. On the left, click Clients.
9. Select the group with the SEP clients in it, and then click the Install Packages tab in the right pane.
10. Under Tasks, choose Add Client Install Package.
11. In that screen, select the correct package in the drop down menu for use with this group (32 bit or 64 bit base install files). Both packages can be separately assigned to the same group.
12. Uncheck Maintain existing client features when updating.
13. Below that, select the feature set needed from the dropdown menu.
14. If Upgrade Schedule is not selected, then clients will receive the instructions to change their installation when they check in with the manager. This launches MSIEXEC on the client.
15. After the installation completes, a restart is required if the change installs or uninstalls Network Threat Protection.

Reference: http://www.symantec.com/docs/TECH90936