This issue has been solved.

Linux OS AV Scanning in SEPM 12.1.2 ?

Created: 19 Nov 2012 | Updated: 19 Nov 2012
John Santana's picture
John Santana
Login to vote
0 0 Votes

Hi,

What are the latest updates for the SAVFL for Linux ?

I'm thinking to deploy the SEPM Linux appliance to do the Linux OS scanning using vShield API if possible.

Quick Look Solution

The SEP Security Virtual

The SEP Security Virtual Applicance is not a SEPM. It's a linux based virtual appliance that you install on a VMware EXS/EXSi server. It integrates with VMWare's vShield Endpoint. The Shared Insight Cache runs in the appliance and lets Windows based guest VMs share scan results.

I want to make sure your not confusing this as it does not act as a virtual SEPM.

Filed Under

Tags:
, , , ,

Comments

pete_4u2002
Symantec Employee
19
Nov
2012
Votes
+1

latest definition for linux

latest definition for linux can be downloaded from below link. at this moment it is 2012/11/19-rev 004

http://www.symantec.com/security_response/definitions/download/detail.jsp?gid=savce

Cheers!
Pete

Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619

Brian81
Trusted Advisor
Certified
19
Nov
2012
Votes
+1

From here for all

From here for all defs:

http://www.symantec.com/security_response/definiti...

SEP Knowledge Base

Endpoint SWAT

pete_4u2002
Symantec Employee
19
Nov
2012
Votes
+1

can you clarify what you mean

can you clarify what you mean to say SEPM on Linux appliance.

Cheers!
Pete

Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619

Brian81
Trusted Advisor
Certified
19
Nov
2012
Votes
+3
SOLUTION

The SEP Security Virtual

The SEP Security Virtual Applicance is not a SEPM. It's a linux based virtual appliance that you install on a VMware EXS/EXSi server. It integrates with VMWare's vShield Endpoint. The Shared Insight Cache runs in the appliance and lets Windows based guest VMs share scan results.

I want to make sure your not confusing this as it does not act as a virtual SEPM.

SEP Knowledge Base

Endpoint SWAT

John Santana
19
Nov
2012
Votes
0

Ah, so it doesn't scans Linux

Ah, so it doesn't scans Linux host as per the definition using vShield API ?

 

Kind regards,

John Santana
Graduate IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Brian81
Trusted Advisor
Certified
19
Nov
2012
Votes
+1

It only works for clients

It only works for clients managed by the SEPM, as you need to set this up in the AV policy. Linux clients cannot be managed by SEPM as of yet.

SEP Knowledge Base

Endpoint SWAT

John Santana
19
Nov
2012
Votes
0

cool, thanks Brian !

cool, thanks Brian !

Kind regards,

John Santana
Graduate IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.