Hi everybody,

I have the extreme need to control the time of the day that the updates are deployed from the SEPM to the clients. I know that the SEPM itself  lets you define when to update from the cloud but there is no easy way to control that he only deploy that new update to all the hosts in the network, for example lets say after 14:00hs every day. 

*I don't want to have additional network traffic in my LAN regarding antivirus updates in working hours or at least not in the morning.

I can see that in the Symantec Endpoint Protection client console there is an option in Change Settings>>Client Management>>Configure Settings>>Schedule Updates tab.....but how can i do that same thing in the Symantec Endpoint Protection Manager Console? Is it the only just installing the LiveUpdate Server?? It seems a pretty simple administrative task that the manager console should have

I can see that the Schedule option exists, but it just gets enabled when you defined a LiveUpdate server according to what i could understand.

Thanks for your help

Um....I'm kinda confused by your question.

Do you mean when SEPM deploys LiveUpdate content to SEP?

If that's what you mean, then

1. Log into SEPM

2. Click on Admin tab to your left

3. Click on Servers

4. Select Local Site

5. Click Edit Site Properties

6. Click LiveUpdate

Attached is a screenshot ... hope this helps

If you need to set the timing of Live Updation then Rasaka comment is better for the same.

You can set the time as per your required

It's not possible to set a schedule for updating the clients from the SEPM. It's only possible to create a schedule for updating the clients from an internal or external LiveUpdate server.

However, if you want to update the clients from their SEPMs, the best way to minimize network traffic is to prevent full downloads of antivirus content (~ 160  MB). This can be done by storing enough content revisions at the SEPM.

If you are updating your SEPM every 4 hours, for example you could save 21 revisions to cover a complete week. Symantec is sending up to 3 content revisions per day. If you are updating your SEPM once a day, 7 content revisions are enough for a week. Now every client with content not older than a week will pull so-called delta files from its SEPM. These delta files are often not bigger than some  100 KB, compared to 160 MB of a full download.

Here is some stuff to this topic:

With default LiveUpdate content revision settings configured within the Symantec Endpoint Protection Manager, clients are downloading full definition updates instead of delta updates

http://www.symantec.com/docs/TECH94916

Unfortunately, content revisions are eating up a lot of disk space. One content revision has a size of about 900 MB (and this number is constantly growing). See Paul Murgatroyd's post here (and substitue 81.5 by 160):

https://www-secure.symantec.com/connect/forums/disk-space-management-downloads#comment-4211241

Additionally, set the Communication settings (Clients > Policies > Communication settings) to Pull mode, take a generous heartbeat interval and activate the Download Randomization.

Hi. I'm pretty sure what RSASKA comment is only to control the updates that the SEPM server does from the cloud (not referred to the schedule of deploying updates to the hosts of the network)..Please correct me if i'm wrong.

greg12, i have my SEPM configured the way you mention, have enough content revision (20 delta files; i believe is fine for a network of +1000 hosts), and set the update of the SEPM in a daily basis.

I installed the LiveUpdate server but here is my sorprise: The Group Update Provider and the scheduling that the LiveUpdate does to control the deploy of updates, excludes each other!

I mean, my desire was to be able to stablish a schedule of the deploys of updates, even if a have Group Update Provider configured. In cases of multiples branches/offices, and being aware of the precarious internet connection in south america, we believe that the best practice is to set Group Update Provider and to be able to schedule WHEN this update provider would start updating. I though Live Update Server will help me solve this, but apparently not.

Any ideas to solve this situation would be appreciated.

Thanks

GUP can receive updates from SEPM only. Updates thogh SEPM/GUP cannot be scheduled. Have a look at this article, you may get some tips.

Tips For Installing SEP In A Low Bandwidth Environment

AravindKM Thks for the article, very informative!

Still, kinda upset because updates of GUP can't be schedule though..

Currently this feature is not available in SEPM. There is some product enhancement requestes are present in the idea section. You may also vote for it.

Scheduled Update For GUP