Endpoint Protection

 View Only
  • 1.  Live Update Settings for PCs that require definitions to be approved

    Posted Oct 09, 2014 11:35 AM

    I have a group of PCs that need to have virus definition files approved before I can push them out to the PCs. So these PCs run behind on definitions by about a week. I then get an email from the company that a certain definition is approved and I can either download, from their site, a .jdb definition file or an exe that I can run from the machine to do the updates.

    I used to download the jdb file and push the file to the inbox folder of symantec on the local drives and this would pull the update. Now, every single time I do that, I get an invalid file and no update occurs. I have reinstalled SEP and have tried jdb files over the last 3 months, still no sucess. But if I download the exe file and run it locally, the definitions get updated. The only problem with this approach, is I get definition files every week, and it is not possible for me to go to each machine every week and run an executable. It would take way too much time.

    What other options do I have to get these PCs to update with the jdb files I download from the vendor website? Can I use 3rd party software, what kind? Can I use a group update provider that only has the definitions I download? What are my options?

    I am running SEPM 12.1.5 on a Windows 7 machine and my PCs that need to be in this group are running SEP 12.1.2 as that is the newest version the vendor allows.

    Thanks,

    Storm



  • 2.  RE: Live Update Settings for PCs that require definitions to be approved
    Best Answer

    Posted Oct 09, 2014 11:54 AM

    You can use LiveUpdate Administrator for this:

    https://www-secure.symantec.com/connect/forums/delaying-automated-virus-def-rollouts

    https://www-secure.symantec.com/connect/forums/delay-security-definitions-going-out



  • 3.  RE: Live Update Settings for PCs that require definitions to be approved

    Posted Oct 09, 2014 12:05 PM

    Brian,

     

    Thanks. I made a new content policy and selected to only allow virus and spyware definitions and selected the revision.

    But my Live Update policy for this group has it set to not use the default management server, not use a live update server, but to use 3rd party content management. Will my clients in this group still go to the revision I selected in the new content policy group I created for this group?

    Thanks.



  • 4.  RE: Live Update Settings for PCs that require definitions to be approved

    Posted Oct 09, 2014 12:14 PM

    Yes, they should use what you select then. A few good articles here:

    http://www.symantec.com/docs/HOWTO55242

    http://www.symantec.com/docs/TECH102935



  • 5.  RE: Live Update Settings for PCs that require definitions to be approved

    Posted Oct 09, 2014 12:15 PM
      |   view attached

    This is an image of my live content settings for said group.