Endpoint Protection

 View Only
  • 1.  Integration with Multi-forest AD setup

    Posted May 31, 2016 04:19 AM
    Hi We have 3 AD forests. All have two way trust. SEP server is joined to one of the forest. We want to integrate our SEP server with all three Forest. Is it possible as I see an option to put LDAP Server IP. But can I put LDAP IPs of each forest and sync specific OUs from each forest? Will appreciate the suggestions with links to achieve this task if possible. Thanks Rafay


  • 2.  RE: Integration with Multi-forest AD setup

    Trusted Advisor
    Posted May 31, 2016 05:24 AM

    Hello,

    Yes, you can add multiple AD syncs and domains.  You just add the multiple domains as you would normally. 

    Check this Thread with similar issue - 

    https://www-secure.symantec.com/connect/forums/universal-server-and-multiple-active-directory-domains

    Check these Articles:

    https://support.symantec.com/en_US/article.HOWTO81142.html

    https://support.symantec.com/en_US/article.TECH181458.html

    https://support.symantec.com/en_US/article.DOC9126.html

    Regards,



  • 3.  RE: Integration with Multi-forest AD setup

    Posted May 31, 2016 05:48 AM

    Please check the comment from Sandeep Sali for adding multiple DCs

    https://www-secure.symantec.com/connect/forums/ldap-ou-synchronization



  • 4.  RE: Integration with Multi-forest AD setup

    Broadcom Employee
    Posted May 31, 2016 10:32 AM

    Hi,

    You can connect Symantec Endpoint Protection Manager to either Active Directory or an LDAP-compatible server. When you add the server, you should enable synchronization. 

    Can refer these articles:

    http://www.symantec.com/docs/HOWTO80713

    http://www.symantec.com/docs/HOWTO80736