Hello,

We want our Symantec Endpoint Protection client has update schedule by Symantec Endpoint Protection Manager, so they can update virus definitions from Symantec Endpoint Protection Manager policy schedule.

My question is how to setup LiveUpdate policy that meet my requirement ? we don't want our client update from LiveUpdate server, thanks.

In the LiveUpdate policy you can check the "Use default management server" option. You can uncheck "Use default Symantec LiveUpdate server" so they do not go out to LiveUpdate

These KB articles should provide a good detail of info:

Managing content updates

Article:HOWTO80884

|

Created: 2012-10-24

|

Updated: 2013-01-30

|

Article URL http://www.symantec.com/docs/HOWTO80884

 

How client computers receive content updates

Article:HOWTO80888

|

Created: 2012-10-24

|

Updated: 2013-01-30

|

Article URL http://www.symantec.com/docs/HOWTO80888

 

Hello,

Look this attached Public KB's

Symantec Endpoint Protection Manager 12.1 - LiveUpdate - Policies explained

 

Article:TECH178257

|

Created: 2012-01-04

|

Updated: 2012-04-23

|

Article URL http://www.symantec.com/docs/TECH178257

https://www-secure.symantec.com/connect/articles/how-configure-proxy-settings-symantec-endpoint-protection-manager-sepm-121

Hi

In Liveupdate policy put checkmark on "Use Default Managment Server" and uncheck "Use default Symantec Liveupdate Server"

Regards

 

 

Hello, 1. Sorry for late reply, our SEPM selecting both "Use default management server" and "Use default Symantec LiveUpdate server", what will they do ? 2. A lot of doucment of how to update definitions to clients, so I don't have time to read them, could someone exmplain where to setup update schedule for a group ? Thanks

Hello,

You can unchecked "Use default Symantec LiveUpdate server" after your sep client will be direct update sepm server.

Hello, Forget to ask a question, I read a document explained SEPM default update definitions to client is 4 hr, will it auto update when client started computer ? Thanks

yes, It's automatic update..

To ManishS, Can I disable update when client started computer? Thanks

No, you can't do this...

Instend You can set virus defination update every 4 to one in day

New definitions are just few hundreds KB per day, hence there is no huge impact on single system performance, hence no real reason to force the update at lunch break. Of course, if all computers download the definitions at the same time, the spike of network traffic will cause performance issues hence the right strategy is to randomize the download over the time instead of synchronizing it. The randomization of content download can be set in the communication settings of each group.

try this,

 

 

http://www.symantec.com/business/support/index?page=content&id=TECH163112

 

 

To Sachin Sawant, You URL URL do not have related how to setup update schedule. Thanks

Hello Sachin,

Question is related to client update schedule.

Hi Leiw,

Please check with below article..

 

http://www.symantec.com/business/support/index?page=content&id=HOWTO81355

http://www.symantec.com/business/support/index?page=content&id=HOWTO16305

Documents to refer. Upgrade clients to SEP 12.1 by Auto upgrade feature https://www-secure.symantec.com/connect/articles/upgrade-clients-sep-121-auto-upgrade-feature http://service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/c7a72ad01d122b13882574330072026a

How is this related to the problem in this thread?

We want our Symantec Endpoint Protection client has update schedule by Symantec Endpoint Protection Manager, so they can update virus definitions from Symantec Endpoint Protection Manager policy schedule.

My question is how to setup LiveUpdate policy that meet my requirement ? we don't want our client update from LiveUpdate server, thanks.

 

- It's not possible to use schedule for downloads from SEPM, SEP client will download virus definitions from the SEPM by either its heartbeat (client pull mode) or when if in push mode - take the definitions as soon as these are available on the SEPM.

....the schedule option you see in the Liveupdate policy applies only to updates from Symantec Liveupdate Servers or from LUA administrator server.

 

The only possible options for you would be:

- set the clients to update from internet -> then the schedule will be honored

- set the schedule for the SEPM downloads from internet server itself as desired -> clients won't download any update until SEPM gets them first (its not best solution though)

- use LUA in the environment - all kind of scheduling is possible with it

OK, thank all