Endpoint Protection

I'm attempting to create a package with all the features of SEP11 so I don't have to reinstall when my mangement finally decides to use them all. However, all I'm getting as part of the 'all features' default Client Install Feature Set is AV and Antispyware Protection, Network Threat Protection, and Proactive Threat Protection - no firewall, no app\device control, no intrusion detection.

How do I get those features installed in the package?

I am new to SEP11 (although I've used Symantec since version 7.6) so perhaps I've done something wrong on the initial install? I've just upgraded to RU5 and it's made no difference - still no sign of the missing features.

I have over 500 clients already installed, with over a thousand left to go, so please don't tell me to reinstall (unless I won't lose everything!)

Any (and all) help greatly appreciated.
Gill

You are little confused here :) well thats not an issue.

All features has everything

Network threat protction is the firewall which has the applicastion and device control and intrusion detection system
so Network threat protection has all the components.


few links to help you out

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007121714495348

Symantec Endpoint Protection Manager - Application and Device Control - Policies explained

http://service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/82ae89a86cbc44c280257412003bbe78?OpenDocument

I agree with rafeeq. Pls go through the features of SEP.
As Rafeeq told NTP is firewall and you can configure this using the firewall policy under policies tab.
the same way there are policies for each component....
Check this...
http://www.symantec.com/business/products/newfeatures.jsp?pcid=pcat_security&pvid=endpt_prot_1 

Symantec Endpoint Protection: About Proactive Threat Protection.
http://service1.symantec.com/support/ent-security.nsf/docid/2007102515015148?Open&seg=ent

Symantec Endpoint Protection 11.0 Network Threat Protection (Firewall) 
http://service1.symantec.com/support/ent-security.nsf/docid/2007121714495348?Open&seg=ent
REF:
https://www-secure.symantec.com/connect/forums/ntp-and-ptp


ALLICATION AND DEVICE CONTROL POLICY
https://www-secure.symantec.com/connect/forums/device-control-policy

Did you install all the features... 

Do you want to install all the features in all the clients and some of them you installed  with only antivirus and antispyware and you want to install all features in all the clients?

  For the computers which is already  installed with SEP
In the SEPM click the Admin button on the left.

Click Install Packages on the bottom.

Click Client Install Feature Set on the top.

If a feature set doesn't exist that meets your needs, then choose Add Client Install Feature Set.

Give the feature set a unique name.

Select only the features you need (Antivirus/Antispyware, Network Threat Protection, Proactive Threat Protection).

Choose OK.

Still within the SEPM, click the Clients button on the left.

Select the group with your SEP clients in it and then click the Install Packages tab in the right pane.

Under Tasks, choose Add Client Install Package.

In that screen, uncheck the box next to "Maintain existing client features when updating".

Below that, select the feature set you want to use from the dropdown menu.

If you don't choose Upgrade Schedule, then clients will just pick up the instructions to change their installation as they begin to check in, which will launch MSIEXEC on the SEP client.

For new computers which you want to install SEP

Create a package with all features and deploy with the help of that
Below doc can help you in this
Creating custom Client Installation packages in the Symantec Endpoint Protection Manager Console

Thanks for all your replies.
 
It would appear that I am a tad confused <blush>

In my defence I was thrown a curveball because the Symantec rep had all the individual componants listed on his machine when he visited, so I assumed I'd done something wrong. Unfortunately he was unable to explain that NTP includes all the other bits.

I haven't installed NTP on the machines I've done so far, but I can now roll that out to the rest and pick the others up later when I have more time.

Thanks for clearing up the confusion,
Gill