Endpoint Protection

I am going to manually install the .jdb file for server, but i have confusion which of the defintion and other file are kept?

Hello,

Updaing SEPM / SEP clients via .jdb would update only Virus and Spyware Definitions.

Check these Articles - 

How to update definitions for Symantec Endpoint Protection Manager (SEPM) using a .jdb file

http://www.symantec.com/business/support/index?page=content&id=TECH102607

How to manually update definitions for a managed Symantec Endpoint Protection Client using the .jdb file

http://www.symantec.com/docs/TECH104363

Hope that helps!!

When You will be update JDB file NTP and PTP defination not updated

http://www.symantec.com/business/support/index?page=content&id=TECH102607

1. To verify that the SEPM content has been updated, look in the following folders 
2. For SEP 11.0 - Check the following locations:
   32 bit definitions: "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{C60DC234-65F9-4674-94AE-62158EFCA433}"
   64 bit definitions: "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{1CD85198-26C6-4bac-8C72-5D34B025DE35}" 
3. For SEP 12.1 - Check for the following locations:
   32 bit Definitions : "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{535CB6A4-441F-4e8a-AB97-804CD859100E}"
   64 bit Definitions : "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{07B590B3-9282-482f-BBAA-6D515D3855E2}" 
4. Typically, there will be three or more numbered folders present. The folder naming convention is "yymmddxxx". For example "100602034". This is the date and build (revision) number of the definition set installed. Please note that the definition set installed may have been published the previous day and a set for the current day may not yet be available.
5. Looking inside the folder that matches the set downloaded and installed, there should be a folder named "Full" and a zip file named "Full.zip".
6. Looking inside the "Full" folder, there should be the files typically associated with a virus definition set.

only av definition updated

Hi,

SEPM stores the defintions as per SEPM configuration.

Disk Space Management procedures for the Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH96214

By default SEP 12.1 clients keep only 1 defintion.

As everyone stated .jdb file will only update AV definitions. It can't update PTP & NTP definitions.
 

Then how to update the PTP and NTP manually.

there is no way to update manually , you can use LUA. there have been some script talked on this forum but it's not supported

Hello,

I agree with pete's comment.

You could not manually update the PTP and NTP definitions. These could be updated only via Liveupdate i.e; Either from SEPM or via Liveupdate Administrator.

In case of SEPM, check the Articles provided above.

and 

In case of LUA, check the Articles below:

How to distribute definition content from a LiveUpdate Administrator 2.x (LUA 2.x) server to an isolated network.

http://www.symantec.com/docs/HOWTO44060

Updating downloads in an internal LiveUpdate Administrator 2.x Server using the downloads from an external LiveUpdate Server 

http://www.symantec.com/docs/TECH106254

Hope that helps!!

A *.jdb file can be used to update the virus definitions for SEPM.
Please note that the .jdb file only contains antivirus/antispyware definitions and will not provide updated content for the firewall and other features for the Symantec Endpoint Protection (SEP) clients.

Use the .jdb certified definitions or the .jdb Rapid Release definitions to update SEPM content. Please note that the consistent use of the Rapid Release definitions is not encouraged by Symantec and the use of the Rapid Release definitions is intended to be used on a case by case basis to mitigate a possible virus outbreak. Under normal conditions, Symantec strongly encourages customers to use the Daily Certified definitions for routine use. 

If you are unsure as to which definitions set you should use, please contact Symantec Support for guidance.

To download the .jdb certified definitions:

1. In a browser, go to the "Symantec Endpoint Protection / Symantec Antivirus Corporate Edition" website at the following URL:http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce
2. There are multiple headings/product categories presented. Be aware that there is only one .jdb in the list that will need to be downloaded. This is sufficient in updating both 32 and 64 bit definitions on the SEPM.  

To download the .jdb Rapid Release definitions:

1. In a browser, go to the "Rapid Release Virus Definitions" website at the following URL:http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=rr
2. Download the available .jdb file and save the file to the Windows desktop.

To use the .jdb file to update definitions for SEPM:

1. After downloading, you may need to rename the file extension from ".zip" to ".jdb". (Most browsers detect the file type and automatically change the extension. This must be changed back to .jdb for use in the SEPM.)
2. Copy the .jdb file to "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\incoming" for 32 bit operating systems and to "C:\Program Files(x86)\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\incoming" for 64 bit operating systems. The location listed in this line is the default installation location and is presented as an example only.
3. The .jdb file will be processed, usually within one minute. As the .jdb file is processed, all files and subfolders are removed from the "Incoming" folder.

Verify that the SEPM content is updated:

1. To verify that the SEPM content has been updated, look in the following folders 
2. For SEP 11.0 - Check the following locations:
   32 bit definitions: "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{C60DC234-65F9-4674-94AE-62158EFCA433}"
   64 bit definitions: "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{1CD85198-26C6-4bac-8C72-5D34B025DE35}" 
3. For SEP 12.1 - Check for the following locations:
   32 bit Definitions : "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{535CB6A4-441F-4e8a-AB97-804CD859100E}"
   64 bit Definitions : "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{07B590B3-9282-482f-BBAA-6D515D3855E2}" 
4. Typically, there will be three or more numbered folders present. The folder naming convention is "yymmddxxx". For example "100602034". This is the date and build (revision) number of the definition set installed. Please note that the definition set installed may have been published the previous day and a set for the current day may not yet be available.
5. Looking inside the folder that matches the set downloaded and installed, there should be a folder named "Full" and a zip file named "Full.zip".
6. Looking inside the "Full" folder, there should be the files typically associated with a virus definition set.
   
   Important Notes:

1. The Intelligent Updater file names for Symantec AntiVirus (SAV) clients end with "i32.exe" or "i64.exe" (32 and 64 bit respectively).
2. The Intelligent Updater file names for SEP clients end with "v5i32.exe" or "v5i64.exe" (32 and 64 bit respectively).
3. The Intelligent Updater file name that ends in "x86.exe" is only for specifically listed products and should only be used with those products.
4. The SEPM updater file has a ".jdb" extension. There should only be one .jdb listed at any time and will update content for both 32 and 64 bit systems.
5. The SAV Parent Server updater file has a ".xdb" extension and only updates 32-bit virus definitions; SAV parent servers do not serve 64 bit definitions. 64 bit systems cannot be SAV parent servers.

Additional Clarification:
The Intelligent Updater .exe files are designed to update client installs for SEP or SAV only. These files do not contain the required files needed by a SEPM or SAV Parent to additionally update any clients attached.

How to manage the number of definitions maintained by the SEPM, see the following knowledge base document:
Title: 'How to change the number of downloaded content revisions that are kept in 11.0.2000 (MR2) or later.'

How to manually update it...

Can anyone share the step to set update setting

not understand the requirement. pls clearly mention it

How to update virus definitions and other content with Symantec Endpoint Protection and Symantec Network Access Control

http://www.symantec.com/business/support/index?page=content&id=TECH102467

Hi,

any update on this ?

How to set the live update there for all the defintion.

Hi Guru,

The answer remains same. You can manually update only AV/AS definitions not PTP & NTP definitions.

Hi Chetan,

I am not telling about manually, I mention about Live update automatically

Hi,

Go to Admin --> Servers --> Local Site --> Right click local site --> Liveupdate --> Download  Schedule--> Edit Download Scheduled as per requirement  

Also check following article:

Configuring Symantec Endpoint Protection Manager to connect to a proxy server to access the Internet

http://www.symantec.com/docs/HOWTO55201

Hi Guru,

I think i have already provide steps on my last comments.

How to update virus definitions and other content with Symantec Endpoint Protection and Symantec Network Access Control

http://www.symantec.com/business/support/index?page=content&id=TECH102467

hi Guru,

Any update on this ?

Thanks for the help and Support to all.