Endpoint Protection

 View Only

  • 1.  How to enabled NAC on an already running SEP environment?

    Posted Oct 09, 2009 11:13 AM
    Hi all,

    Some days ago we received our licenses for SNAC Starter Edtion. We already have a SEP environment up and running for some years, and our SEPM server was recently migrated to RU5.
    My environment was first configured to work only with SEP clients, now I need it to control SEP clients with NAC feature. I've read somewhere that if I want to enable the Host Intergrity Policies on the SEPM Console, I need to reinstall SEPM using the installer that comes with the NAC CD image. I tried that, went through the configuration process again, but nothing happens.

    So, how do I (really) enabled the Host Intergrity policies on my SEPM?

    Thanks,
    Eduardo


  • 2.  RE: How to enabled NAC on an already running SEP environment?

    Posted Oct 09, 2009 11:23 AM
    https://www-secure.symantec.com/connect/forums/snac-license-file



  • 3.  RE: How to enabled NAC on an already running SEP environment?

    Posted Oct 09, 2009 12:31 PM
     It's pretty simple..  Pop in the SNAC CD, run the correct installer, and bam!  You now have a new entry in the SEPM for "host integrity."

    The Installer, adds the functionality to the SEPM, it doesn't need to "reinstall," anything.


    The client doesn't need to change :-)




  • 4.  RE: How to enabled NAC on an already running SEP environment?

    Posted Oct 09, 2009 03:33 PM
    In already running SEPM environment the best practise would be to copy the SNAC.XML file from: %SNAC CD%\SEPM\
    to: %Program Files%\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\license\
    Then restarting SEPM services and then
    Manually adding the Install package by going in to ADmin-Install packages-Add-browse CD SEPP\Packages\
    there you will XML files for 32 and 64 bit add them one by one..

    Sometimes running SNAC-SEPM install over a already running SEPM install breaks the SEPM.


  • 5.  RE: How to enabled NAC on an already running SEP environment?

    Posted Oct 09, 2009 04:34 PM
     Vikram,
    What's scary about your last comment 
    "Sometimes running SNAC-SEPM install over a already running SEPM install breaks the SEPM."

    True in my experience, if you install a DIFFERENT version of SNAC to SEPM.  Like MR4 SNAC to an MR4 MP1a SEPM.  

    It's supposed to work with an inplace upgrade, those are the directions given.  If there are issues, it should be known and posted as an article.