Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Product updates for unmanaged client - SEP 11.0.5 - how do I?

Updated: 21 May 2010 | 8 comments
Wally's picture
+1 1 Vote
Login to vote
This issue has been solved. See solution.

Hello all,

I have a small number of unmanaged clients that were installed directly from the CD1 directory (i.e. not using SEPM).    They are getting content updates directly from the Symantec LiveUpdate server.   

How can I set these unmanaged clients to get product updates directly from the Symantec LiveUpdate server?   Is there a setting in the client's LiveUpdate to enable product update retrieval without having to use SEPM to set a LiveUpdate policy.

It is my understanding that in eariler releases of SEP that even though the product update policy field existed in SEPM, it was ignored because the feature had not been implemented.

So - in SEP 11.0.5 can (1) unmanaged clients retrieve product updates through LiveUpdate and (2) can I configure an unmanaged, stand alone client to get product and content updates directly from the Symantec LiveUpdate server without using SEPM to set the LiveUpdate policy?  Or, is the default for unmanaged clients already set to retrieve product updates?

Otherwise, my assumption is that product updates will be distributed as msp patch files that can be downloaded directly from Symantec.

Thanks.

 

 

 

Comments

Rafeeq's picture
10
Mar
2010
1 Vote +1
Login to vote

Hi

Unmanaged clients will not get product updates.
it will just download virus definitions, SEPM has the capability of downloading it,
Unmanaged clients wont have much options. 

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

Wally's picture
16
Mar
2010
1 Vote +1
Login to vote

Hello Rafeeq - Vikram

Hello Rafeeq -

Vikram posted some registry tweaks for the SEPM Client.  It looks like I can set EnableProductUpdates to 1 to allow the unmanaged clients to get product updates directly via LliveUpdate.

I'm assuming that this is the registry setting that the SEPM LiveUpdate Settings Policy "Automatic Product Upgrades" (P. 126 SEPM Admin. guide) sets.

I'm going to try this - if it works it will be a great solution for me. 

Here's the link to the registry tweaks.

http://www.symantec.com/connect/fr/articles/symantec-endpoint-protection-few-registry-tweaks

Thanks for your reply.

Wally

Vikram Kumar-SAV to SEP's picture
10
Mar
2010
2 Votes +2
Login to vote

 What are you referring to as

 What are you referring to as Liveupdate server ?

<<they are getting content updates directly from the Symantec LiveUpdate server.   >>


<<How can I set these unmanaged clients to get product updates directly from the Symantec LiveUpdate server?>>


<<directly from the Symantec LiveUpdate server without using SEPM to set the LiveUpdate policy>>

If you are referring to Liveupdate Administrator then yes..you can update virus definition on your Unmanaged Clients using Liveupdate Administrator.

In the LUA you will have to export the settings.liveupdate and you will have to replace it on all the clients.

Read Liveupdate Admin's User guide for details on how to do it.
ftp://ftp.symantec.com/public/english_us_canada/liveupdate/lua_2.1/



Wally's picture
16
Mar
2010
1 Vote +1
Login to vote

I am referring to Symantec's

I am referring to Symantec's LiveUpdate server.   The unmanaged clients get their virus definition updates directly from Symantec by default without having to go through LiveUpdate Administrator.

So, what I'm trying to do is set the unmanaged clients to get their product updated directly from Symantec (manual LiveUpdate) without going through LUA.  

I think you're telling me I can use LUA to generate the appropriate settings to enable an unmanaged client to download product updates directly from Symantec rather than from LUA.   I seem to remember reading somewhere that the product updates will come from Symantec as MSP files.  If they come through LUA they are delivered as microdefs.

I also think there are some setting in SEPM to manage the product updates.   I'll have to dig a little further.

Thanks for your input.

Wally's picture
16
Mar
2010
1 Vote +1
Login to vote

According to the SEPM Admin

According to the SEPM Admin guide (pp. 120-127), the SEPM can configure a LiveUpdate Settings Policy that will allow an unmanaged client  to pull product updates directly from Symantec under the "Automatic Product Upgrades" advanced settings (p. 126).     I.e., it appears that an unmanaged client can press the LiveUpdate button in the client's UI and get content and product updates.   

I think I'm going to try this instead of LUA.

Wally's picture
16
Mar
2010
1 Vote +1
Login to vote

Vikram - Latest

Vikram -

Latest update...

I found this registry tweak posted by you in the forum - on my unmanaged clients, it looks like I can set EnableProductUpdates to 1 without having to use LUA or SEPM.  This appears to be the far simpler route.

http://www.symantec.com/connect/fr/articles/symantec-endpoint-protection-few-registry-tweaks

Thanks,

Wally

Albert Widjaja's picture
16
Mar
2010
0 Votes 0
Login to vote

Unamanged convert into managed workaround

Hi Vikram,

so is this a work around if somehow 64 bit client is having problem with push install from the SEP Mgr ?

if yes then it is good to know.

/* Infrastructure Support Engineer */

Vikram Kumar-SAV to SEP's picture
16
Mar
2010
1 Vote +1
Login to vote

Well..yeah thats right..It

Well..yeah thats right..It will download the product update from Internet..