Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

How to setup Symantec Endpoint Protection client update schedule.

Created: 05 Mar 2013 | 17 comments

Hello,

We want our Symantec Endpoint Protection client has update schedule by Symantec Endpoint Protection Manager, so they can update virus definitions from Symantec Endpoint Protection Manager policy schedule.

My question is how to setup LiveUpdate policy that meet my requirement ? we don't want our client update from LiveUpdate server, thanks.

Operating Systems:

Comments 17 CommentsJump to latest comment

.Brian's picture

In the LiveUpdate policy you can check the "Use default management server" option. You can uncheck "Use default Symantec LiveUpdate server" so they do not go out to LiveUpdate

These KB articles should provide a good detail of info:

Managing content updates

Article:HOWTO80884  |  Created: 2012-10-24  |  Updated: 2013-01-30  |  Article URL http://www.symantec.com/docs/HOWTO80884

 

How client computers receive content updates

Article:HOWTO80888  |  Created: 2012-10-24  |  Updated: 2013-01-30  |  Article URL http://www.symantec.com/docs/HOWTO80888

 

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

W007's picture

Hello,

Look this attached Public KB's

Symantec Endpoint Protection Manager 12.1 - LiveUpdate - Policies explained

 

Article:TECH178257  |  Created: 2012-01-04  |  Updated: 2012-04-23  |  Article URL http://www.symantec.com/docs/TECH178257

https://www-secure.symantec.com/connect/articles/how-configure-proxy-settings-symantec-endpoint-protection-manager-sepm-121

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SameerU's picture

Hi

In Liveupdate policy put checkmark on "Use Default Managment Server" and uncheck "Use default Symantec Liveupdate Server"

Regards

 

 

leiw's picture

Hello,

1. Sorry for late reply, our SEPM selecting both "Use default management server" and "Use default Symantec LiveUpdate server", what will they do ?

2. A lot of doucment of how to update definitions to clients, so I don't have time to read them, could someone exmplain where to setup update schedule for a group ?

Thanks

W007's picture

Hello,

You can unchecked "Use default Symantec LiveUpdate server" after your sep client will be direct update sepm server.

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

leiw's picture

Hello,

Forget to ask a question, I read a document explained SEPM default update definitions to client is 4 hr, will it auto update when client started computer ?

Thanks

W007's picture

yes, It's automatic update..

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

leiw's picture

To ManishS,

Can I disable update when client started computer?

Thanks

W007's picture

No, you can't do this...

Instend You can set virus defination update every 4 to one in day

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Beppe's picture

New definitions are just few hundreds KB per day, hence there is no huge impact on single system performance, hence no real reason to force the update at lunch break. Of course, if all computers download the definitions at the same time, the spike of network traffic will cause performance issues hence the right strategy is to randomize the download over the time instead of synchronizing it. The randomization of content download can be set in the communication settings of each group.

Regards,

Giuseppe

leiw's picture

To Sachin Sawant,

You URL URL do not have related how to setup update schedule.

Thanks

Ambesh_444's picture

Hello Sachin,

Question is related to client update schedule.

Hi Leiw,

Please check with below article..

 

http://www.symantec.com/business/support/index?pag...

http://www.symantec.com/business/support/index?pag...

 

Thank& Regards,

Ambesh

"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

SebastianZ's picture

How is this related to the problem in this thread?

SebastianZ's picture

We want our Symantec Endpoint Protection client has update schedule by Symantec Endpoint Protection Manager, so they can update virus definitions from Symantec Endpoint Protection Manager policy schedule.

My question is how to setup LiveUpdate policy that meet my requirement ? we don't want our client update from LiveUpdate server, thanks.

 

- It's not possible to use schedule for downloads from SEPM, SEP client will download virus definitions from the SEPM by either its heartbeat (client pull mode) or when if in push mode - take the definitions as soon as these are available on the SEPM.

....the schedule option you see in the Liveupdate policy applies only to updates from Symantec Liveupdate Servers or from LUA administrator server.

 

The only possible options for you would be:

- set the clients to update from internet -> then the schedule will be honored

- set the schedule for the SEPM downloads from internet server itself as desired -> clients won't download any update until SEPM gets them first (its not best solution though)

- use LUA in the environment - all kind of scheduling is possible with it