Endpoint Protection

 View Only
  • 1.  Need to ensure machines wont update

    Posted Jan 12, 2015 03:47 PM

    We have a history of bandwidth issues and i want to ensure that all clients will not update at a specific time. This is due to a Highlevel broadcast and we cant afford to have symantec running any updates through GUPS or the console. What / How can i acheive this?

    URGENT REPLY NEEDED



  • 2.  RE: Need to ensure machines wont update

    Posted Jan 12, 2015 04:00 PM

    You cannot set a time to get updates from SEPM or GUP, happens automatically.

    Yopu can however uncheck in the LU policy to not allow machines to update



  • 3.  RE: Need to ensure machines wont update

    Posted Jan 12, 2015 04:33 PM
    It would be a manual thing you need to specify sep communication in pull mode .. Check this http://www.symantec.com/business/support/index?page=content&id=HOWTO80912


  • 4.  RE: Need to ensure machines wont update

    Posted Jan 12, 2015 07:17 PM
    What happens when the policies are renenabled? Wouldn't all machines attempt to update and slowdown the network considerably?


  • 5.  RE: Need to ensure machines wont update

    Posted Jan 12, 2015 07:17 PM
    What happens when the policies are renenabled? Wouldn't all machines attempt to update and slowdown the network considerably?


  • 6.  RE: Need to ensure machines wont update

    Posted Jan 12, 2015 07:26 PM

    If you make the change from the SEPM the policy will remain until you change it. And why can't you update? How are clients going to get updated?

    You can put bandwidth controls in place with 12.1.5, see here:

    Symantec Endpoint Protection Bandwidth Control for Client Communication



  • 7.  RE: Need to ensure machines wont update

    Posted Jan 12, 2015 08:10 PM

    Yes they wont slow down if all of them are configured to get update at same time ( push mode)

    we have few issues with SAN when all of them tried to update at once. what we did was to configure hearbeat as PuLL mode with different interval. 6, 12, 18 hours, this setting was helpful to us.

    to bypass the update you can set your cleints to get update from internet  using a schedule to a future date like 2016, again its all manual once done you need to enable those manually.



  • 8.  RE: Need to ensure machines wont update

    Posted Jan 12, 2015 08:41 PM

    Just to add you can set limitations so that they dont slow down the network

    Symantec Endpoint Protection Bandwidth Control for Client Communication

    http://www.symantec.com/business/support/index?page=content&id=TECH201290