Endpoint Protection

 View Only

  • 1.  Hyper-v question

    Posted Oct 09, 2014 10:15 PM

    Hello,

     

    We use Symantec Endpoint Protection 12.1.5 in a single server (2003) environment and are looking at upgrading to Server 2012 and running a few virtual servers via Hyper-v.  I have read a couple of posts and white papers on running in a hyper-v environment but I am still confused about the Endpoint Protection Manager.

     

    Can the manager be run on a hyper-v virtual machine?  If no, can it be run on the host machine with SEP clients installed on the virtual machines?

     

    Thanks



  • 2.  RE: Hyper-v question

    Posted Oct 09, 2014 10:18 PM
    Yes it can be run on a VM. Each VM should also have a SEP client installed. The manager only manages the clients, it does not provide actual protection.


  • 3.  RE: Hyper-v question

    Broadcom Employee
    Posted Oct 11, 2014 05:13 AM

    Hi,

    Thank you for posting in Symantec community.

    Can Symantec Endpoint Protection (SEP) client or Symantec Endpoint Protection Manager (SEPM) be installed on a Microsoft Hyper-V server?

    Solution:

    Microsoft's Hyper-V Server is a stand-alone hypervisor-based server virtualization product. Hyper-V utilizes the Windows Hypervisor, Windows Server driver model, and virtualization components instead of implementing a full Windows operating environment. Symantec does not provide a Hyper-V Server antivirus client, and Symantec Endpoint Protection Manager does not run on Hyper-V Server.

    Note: This does not apply to Microsoft Windows Server with the Hyper-V role.

    Symantec does support and recommend protecting individual Virtual Machine endpoints running on Hyper-V Server with an appropriate Symantec protection product. For more information on SEP in virtualized environments, see Symantec Endpoint Protection 12.1 - Virtualization Best Practices.

    For technical information on Microsoft's Hyper-V server, see Microsoft Hyper-V Server.

    Reference: http://www.symantec.com/docs/TECH106269 

    can it be run on the host machine with SEP clients installed on the virtual machines?

    --> Yes, If system requirements are met you can install SEPM on host VM.



  • 4.  RE: Hyper-v question

    Posted Oct 11, 2014 02:33 PM

    Hmm, still confused.  One response tells me SEPM can be run in a VM and the next (from Symantec) says that it can only be run on the host machine. . . 



  • 5.  RE: Hyper-v question

    Posted Oct 11, 2014 02:46 PM

    I can only speak from experience but I've only administered SEPMs that were a VM



  • 6.  RE: Hyper-v question

    Posted Oct 13, 2014 06:26 AM

    Just to clarify, the SEPM can be run on either a guest or a host.  Both options work fine, and the choice is up to you.  At no point does Chetan say it can only be installed on the host.  Merely that you can if you want it there.

    In the case of running on a host though, this must be in the form of a full Windows Server installation with the Hyper-V role.  You cannot install the SEPM on the standalone Hyper-V machine.

    My recommendation, if given the option, would be to stick the SEPM on a guest.  This gives you better flexibility for future changes to the environment.



  • 7.  RE: Hyper-v question

    Broadcom Employee
    Posted Oct 13, 2014 06:54 AM

    Just to clear your doubt SEPM can be run on either a guest or a host.

     



  • 8.  RE: Hyper-v question

    Broadcom Employee
    Posted Oct 13, 2014 06:54 AM

    Thanks SMLatCST for your input & I really appreciate it.