IT Consultant Group

Dear All,

I have 2 SEPM server and i want to run live update on both but due to security issue i didn't take one of my server on internet so can i copy liveupdate folder of another SEPM server to which i run liveupdate? and it works on another SEPM server and which files i need to copy from updated server to update another server without having internet.

Thanks

Noor

Hi Noor,

You can use JDBs files for this purpose. Download the JDBs in the SEPM machine that has internet access and copy those to the other SEPM machine at this location :

"<%SEPM Install dir%>\data\inbox\content\incoming"

Default SEPM Install dir would be : "C:\Program Files\Symantec\Symantec Endpoint Protection Manager"

thanks,

Phaneendr.

Thanks Phaneendr for you prompt reply,

you are right somehow but i need to update host integrity for SNAC without internet. is that possible without internet?

Thanks

Noor

you may want to import the policy onto this server from the SEPM which already has the updated policy.

Good!!

But from where i get that updated policy from the updated SEPM server becuse i hav'nt made any policy for live update i only sign in the SEPM console and from the right top click live update.

so i want to ask that is there any way to copy some folders from updated server and transfered another server of SEPM for updating without internet.

Thanks

Noor

I have 2 SEPM server and i want to run live update on both but due to security issue i didn't take one of my server on internet so can i copy liveupdate folder of another SEPM server to which i run liveupdate? 

No, doesn't work. You can update (as written above) with .jdb files, but these files only update antivirus and antispyware files (not IPS, PTP, HI templates ...)

If I understand you correctly, you have the following situation:

1. One SEPM does not have internet connection for security reasons.
2. Another SEPM has internet connection.
3. Both SEPMs need the same content (especially SNAC)

Use a LUA server for updating the SEPM which has not Internet connection. A LUA (LiveUpdate Administrator) mirrors a Symantec LU server. So you get the complete content stuff, not only AV/AS signatures. See this article:

Updating downloads in an internal LiveUpdate Administrator 2.x Server using the downloads from an external LiveUpdate Server: http://www.symantec.com/docs/TECH106254

But from where i get that updated policy from the updated SEPM server becuse i hav'nt made any policy for live update i only sign in the SEPM console and from the right top click live update.

Host Integrity doesn't need much update from Symantec. The HI templates, for examples, are not being updated regularly as far as I know.

Probably you want to transfer a HI policy from one SEPM to the other. Then you can follow this KB article (valid for all policies):

Exporting and importing policies: http://www.symantec.com/docs/HOWTO55193

Thank you Greg, I think it ll works, i ll get back to you when perform above activity and then mart it as solution.

Thanks

Noor