Network Access Control

Hello, I have 100 licence for Symantec Endpoint protection and I want to deploy Symantec Network Access Control but i Can buy only 50 licences

I update the manager with NAC, but can we choose which pc get NAC and what PC just have Endpoint protection ?

Thank'

If you are added Symantec Network Access controler in SEPM server

Do the Following activity to add the SNAC license in SEPM server.

Copy the snac.xml file and paste on following location:-

D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\license

SNAC Policy Implemetion on client.

1.    Login the SEPM server Console .

2.   Go to policy.

3.   Under the View policy show the Host Integerity policy.

4.   Click on Host Integrity Policy.

5.   In the right click on the blank area.

6.   Click on Add then define our requirement.

7.   Then click on OK.

Right click on the New Host Integrity policy and assign on any group which you want.

Please see the scree shot in the attachment.

After the assign the policy.

1.  Go to Client Opetion

2.  Click on policy assigned group.

3.  Click on policy.

4.   You can see the Host Integrity policy under the Location-specific polices.

Attachment(s)

SNAC Screen Shot.zip   681 KB 1 version

Thank

I have done the policy and i affect to one group NAC which contain pc

But my question is, if i have only 50 licence for NAC instead of 100 for Endpoint Protection

Client Symantec on pc have already the NAC ? Or juste the client which have a policie get NAC on their client ?

Thank

In 12x, where the licensing is built into the product, you can use only 50 SNAC licenses even though you have 100 SEP licenses.  If you do not deploy a Host Integrity policy to a client, it does not count against your SNAC license usage.  

So, yes, you can use only 50 SNAC in a 100 SEP environment, with the caviat that you can only push out HI policies to 50 clients.

Thank' for your response, so I will deploy the policie only on Host which i want to control