Endpoint Protection

Hi guys , I just wanted have your views on the following. As other vendors in the market have the possibility to Auto-Discover and Deploy their protection on endpoints on which their protection agent is not being installed and as new machines are added to the network. Currently in SEP we dont have any Automated Mechanisim that will automatically discover such machines and will deploy protection on them without any manual inervention. 

Unamaged Detectiors is not a very good way to discover machines without protection as it is prone to false positive and very labour intensive. I remember we used to have NAC appliance in SEP 11.x to automate the discovery and deployment of SEP on new machines.

Will we ever have this ability in the future versions to automate this process becuase I feel that we are lacking here. We should have something built into the solution that can achieve this.

You've already mentioned unmanaged detector for discovering hosts. If you have a list of clients you can use the client deployment wizard to push to them:

How to install clients using "Client Deployment Wizard" in the Symantec Endpoint Protection Manager 12.1

Aside from that using a third party tool will help. But you're limited within SEPM.

Brian UMD is not user friendly at all, it is very labour intensive and also prone to false positive and it can only disover machines and not to auto-deploy. To give you an example imagine if you have a network that is comprised of 20k+ endpoints. Unamaged detector is not practical to achive the above to auto-discover and auto-deploy. 

Yea I never said it was. But it's the option that exists in SEPM. To be frank, I'd look outside the SEPM to deal with this task.

Yeah I have always been asked this question by the customers as why we doesn't any builtin in ability to to the auto-discovery and auto-deployment since all the major competitors in the market have this ability.

I strongly feel that we should have this feature availalble in SEPM and that the Product Managers needs to give this a serious consideration. Just in my own opinion.  

It's been mine and most other folks since 2007. I quit holding my breath over it.