Endpoint Protection

Ok,
I can install endpoint protection client to any machine in my network, but now I have some machines in the amazon cloud.

I have no vpn to amazon and do not want one, so the question is how to I make a setup.exe file for a totally remote system, one that will need to go to symantec to get its own virus definitions and updates?
SEC 11 seesm to alwasy want the clients to talk back to it, but here is a scenerio where that will never happen.

Just build a package like you normally would, but choose 'Create a single .EXE file for this package' (if you want), then in the same window under Policy Settings, select 'Export an unmanaged client'.  The unmanaged client will default to LiveUpdate for its updates.

First Create a Group

For  that group change the LU policy following this

Title: 'How to allow Symantec Endpoint Protection (SEP) users to run LiveUpdate manually'
Document ID: 2008081811225948
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008081811225948?Open&seg=ent


Then create a custom install pacakge for that group following the kb
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007110513361348

and install the package

Nevermind.  I answered my own question.

There is an unmanaged install client package on the SEC 11 cd.

The CD build is not necessarily the most current version that may or may not match your SEPM install.

Always pick an exported package from the SEPM.  The current release will be 11.0.5001.x, or also known as RU5 (Release Update 5)