Endpoint Protection Small Business Edition

Currently I am working on the new SEP12 deployment. I want to let users update definition as below:

Local GUP---------(if failed)-----------SEPM----------(if failed)----------Symantec webiste

Is it feasible and which way is best for users' clients definition updating?  And how to achieve it?

Thanks!

Hi,

You can set Only If sep client failed for update GUP client will be update SEPM.

so if sep client falied for update from GUP, it will update from SEPM,

So can i set it failed for update from SEPM, then directly get update from internet.......

If you want to allow users ability to update themselves, in your LiveUpdate policy, make sure "Use a LiveUpdate server" is checked. Than it will be available on client GUI

You can also choose to set a LiveUpdate schedule for the client to go out to Symantec LiveUpdate and get updates automtically. In the policy, click on the Schedule tab and you can set it here.

There no option to "Bypass SEPM" if client cannot update from SEPM. You would need to set a LiveUpdate schedule time to do this. Or you can let users manually do it if you need to.

After SEPM failed to update defination you can only update virus defination manually,

manully update virus definition means Iusers need download the virus defenition data  and install it for SEP or the users can also update from Symantec cloud?

No,You can Run LIVE update if use system having internet rights

The users can manaully update by clicking the LiveUpdate buttong on the client GUI.

Local GUP---------(if failed)-----------SEPM----------(if failed)----------Symantec webiste

1. The option "Maximum time the clients try to download updates from A GUP before trying the default management server" is a first failsafe (Local GUP---------(if failed)-----------SEPM) - client not reaching GUP for any reason will ask SEPM for updates after the specified time passes (you can set it up in minutes, hours, days). For obvious reasons days does not really make much sense and is least secure.

2. SEPM----------(if failed)----------Symantec webiste - > there is no direct setting like that in the policy. You can achieve that by enabling additionaly "Use a Liveupdate Server" in the same liveupdate policy. So alltogether to cover whole scenario you would need to enable:

- use the default management server

- use a liveupdate server -> default Symantec Liveupdate Server

- use a group update providerd

+ set - > Maximum time the clients try to download updates from A GUP before trying the default management server"

+ enable the Internet Liveupdate schedule for clients to check with internet Symantec Servers at specified times -> in this scenario Symantec website is not 100% failover to SEPM but the client will check both sources for update (SEPM according to heartbeat, Internet according to schedule).