Endpoint Protection

Hi.
I have Symantec Endpoint Protection 11.x server on Windows 2003 Server and Symantec Endpoint clients. Environment is separate and don't have an Internet. How to update definition on these client. I add .jdb file from this site www.symantec.com/avcenter/download/pages/US-SAVCE.html, but this updates only Antivirus and Antispyware Protection. I don't know how update Proactive Threat Protection and Network Threat Protection. In the environment with Internet all updates alone. Please help.

Why don't you try the simple method

http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=n95

download EXE file from the above site.

Tejas

Because I don't want install .exe file on each computer separately. I want update definition simultaneously on every computer.

I'm not %100 sure but from what I remember there is no way to updates the other defs. other than directly from liveupdate, through LiveUpdate Administrator, or through the SEPM.

Sutton

I have LiveUpdate Administrator on environment with Internet. Can I move these definitions on environment without Internet ? Whai is the SEPM ?

SEPM = Symantec EndPoint Protection Manager, is the console where you administrate all of your SEP clients.

OK, but I don't know how update definition without Internet still.

Does the SEMP has Internet?
You have more than one option for configure the SEPM/clients updates, that's why I recommends you to read the Administration Guide for Symantec Endpoint Protection and Symantec Network Access Control, specifically the Section 1.6 (Updating definitions and content).

It's extensive, but is easy  ;)

No. SEMP hasn't Internet. Server with SEMP and clients are in separate environment. Different SEMP have Internet but it hasn't physical access to that environment.

Copy the contents of the LUAdmin download folder to protected network to some machine that can run IIS, Apache or some FTP server. Configure liveupdate settings in SEPM to fetch updates from that source with the protocol you have chosen to use.
- Jukka

Thanks. I will test in the closest days.

You want to know how to update definitions for the Symantec Endpoint Protection Manager using the .jdb file.


http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100820002048

 Yeah, you can download defs manually, and place it in the folder (\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\incoming folder). This will then propagate defs across the networks.

U first need to download .jdb file from symantec website. iknow you hav downloaded it.
Then save it to following locatiion:-

c:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\incoming  folder

Then  restart your AV

for more information kindly go to following link

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100820002048

copy this link & paste it in your browser 
 
you will get all supportive information about  .jdb file.

You can have the Liveupdate Administrator on a environment which has internet connection and you can configure your manager to reteive definitions from the LUA.
Once the Manager has definitions it can distribute to all the clients.
Or you can configure replication between the SEPm that has internet with your SEPM without internet and you can replicate the contents.

Visit this link
ftp://ftp.symantec.com/AVDEFS/symantec_antivirus_corp

In your environment that has internet, setup a LiveUpdateAdministrator to pull down defs.
Points all your SEP Managers to update from this to save duplicate bandwidth usage.

PTP and NTP does not have inteligent update functionality are simply because those are for 0 day or on-the-wire attack,
hence if you are not on the net, those feature are not 100% . Although one would argue there are worms and trojans that can spread thru the internal network :)

Please bellow the mention link

http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce

I faced the same problem.

go thrugh the link

http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce

download the .jdb file and paste it or .exe file and just run it.

First you go to symantec site download virus defs according to the version you can get the updated console.

that's solved my problem

Hi

I have been through the commects and it seems to me that u hav eenough comment to ressolve ur issue.

If not reply to me with exact solution required

i have SEPM installed on a win2003 sever...sever has no access to internet. i update the SEP on the server using the offline updates the exe file i found on symantec's web page. The thing is i cant  update the clients on the network..i have deployed SEP to the clients my SEPM can see the clients....but they r not updated by pressing the update content....There is no way the server goes out on the internet...so wha do you suggest....Make sever a GUP and pull updates from there?What files and where should i put them on the gup server?

Even if you configure a client has GUP
The GUP client should have access to SEPM managers' defs,( so manager should have defs)

Gup will not update itself from internet and sent it out to others.

the main objective here that manager should be updated not the client on the server.

You can use Liveupdate administrator

or install SEPM on a machine which has internet, replicate nothing but just the liveudpate, things should be fine. Hope this helps

Rafeeq

my clients were updated and i think it was done either by the GUP or by the *.jdb file i installed on the C;\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\incoming but the update was not done in 5mins as it says....so i guess it was done by the GUP.Not sure yet.I did them both...the thing is the update was done after the gup settup

You may want to build a Live Update Server to provide complete update for your pc's.

Liveupdate Administrator can also be configured to update definitions to clients those don't have internet but they are in a network.

.JDB file can be used to update the sepm and later sepm will update clients

The most appropriate setup you need is to set up a liveupdate aministartor to push the all necessary update to you SEP clients.

@wupe84: You might also be wondering about this in the future, only the Antivirus/Antispyware have updates on  a daily basis. The others are on an irregular basis.

I handly copied content from LUA  with Internet to LUA in separate environment. First I download updates to all modules from LUA with Internet. Then I distibute content on the same LUA. Next I copy distributed updated to machine in separate environment to sharing path. This path must be configured in LUA as source path. In LUA I download content and distribute again. In SEPM I configure source server as distributed path in LUA. This configures in Admin/Domain/Edit Properies , on example as http://servername:8080/clu-prod. In this moment server wil download updated. Client must download yet. Now you must configure the LiveUpdate policy to clients. In source server field you write the same server what earlier (http://servername:8080/clu-prod).

I have an environment without Internet and SEPM machine is working on this network. I tried to copy the .jdb file to the specified folder and restart my SEPM machine, but although this, other SEP clients connected to SEPM could not renew the definition dates automatically. I looked up the folder whose name ends as {C60DC234-65F9-4674-94AE-62158EFCA433} and there was only the old virus definition folder. So referring the http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100820002048, something is missing or wrong??

I looked up the folder named {C60DC234-65F9-4674-94AE-62158EFCA433} again, and all I could see was my .jdb file has turned into a folder named "VD2F3E76.jdb.2010-01-07-14-25-42".  So, these actions did not work until now.  

Any more ideas? 

Pls create a new thread since this thread is very old and already it is having a solution.. 

Thank you.