Endpoint Protection

How can I time setup for Symantec end point server update? I want to update server antivirus automatically at night time. And client computers can update from SEP server at day time. SEP Version: 12.1.4013.4013.

Right now I can’t find option in SEP server, when my server is updating everyday

For SEPM see this:

Configuring a site to download content updates

It's not possible for clients to grab updates from the SEPM on a schedule. They will check in based on their heartbeat setting and grab updates if needed.

I am not sure if you want your SEPM or all your "Servers with SEP Client installed" to update at night-Time only.

You could realize this with the use of eithe a Live-Update Administrator (LUA) server that is scheduled to only load Updates at night. (this won't stop the heartbeat-function of the Server-Clients, but they will not be notified of a new update until the LUA actually downloaded one. 

Or you could also use a dedicated GUP for those Clients which you simply shut down during daytime and reboot in the evening.

Anyway you choose: From a security-point of view you will significantly weaken your defense when you are not deploying def-updates as fast as possible.

Best regards

Stephan

From what i understand your request is simple and you can acheive this by following the below steps.

Login to SEPM

Go to Admin Tab

Select Servers tab

now highligh the "local site (Site Name)"

select "Edit site properties" from tasks below

now select "Live Update" and select "Edit Schedule"

Select the Daily Radio button  and 

set the prefferd time and apply the changes

now you are all set.

Haha, true.

I completely forgot about this, thanks for the heads-up!

Keep in mind though for his second question it's not possible to set a schedule for clients to get updates from the SEPM. This happens automatically.

This has been a feature request for along time now with no resolution.

Hi,

Actually we have little control between SEPM & SEP client update process

Other workaround could be, let the liveupdate run at midnight and keep the clients in Push mode so as soon as SEPM receives an update it will pass on to clients. But updating servers at night and clients in the morning is not possible.

Security-point of view it's not good practice to follow because you are not deploying def-updates as fast as possible by SEPM.

Are you facing any challenge with existing setup?

Another idea I got: 

You could setup your Clients to get the updates via SEPM asap (standard)

Your Servers are moved to another Group where you setup the Live-Update to pull from the internet at nighttime only..

It all comes down to where your Servers get their updates from and how you can control this machine/mechanism..

Or just implement the ability for clients to pull updates from the SEPM based on a schedule. That would be just dandy....