Dear Community

I am setting up an SEP solution with 2 SEPM servers; one SEPM internally for internal (LAN) endpoints and one SEPM in DMZ for endpoints in my remote offices.

These offices are not connected via VPN or leased lines, so there is no direct connection.

What are my options for deploying the SEP client software to these remote clients? Do I have other options than just building a package on my SEPM and distribute this to the remote offices, either via physical media or through FTP or other download options and then guide the users to manually install the package? I obviously don't want to open up file sharing on my SEPM in DMZ.

With cloud-SEP you have an option of sending an e-mail with a link and the user can just click on the link and get it installed that way.

Regards,

Thomas

Here is method of installation client

About client deployment methods

Hi James

Many thanks. This is exactly what I was looking for.

So the e-mail link points to my SEPM as follows

http://<server_name>:8014/EmailInstallPackages/56727A070A00010401AB0C9800A4462D_WIN64BIT/sep/Setup.exe

Guess I need to open port 8014 from outside to my SEPM for this to work. This is the same port used for general client to SEPM communication, so this should be open in the first place.

It is possible to change this port to SSL (port 443). I assume this also applies to package deployment, so in such cases I don't need to open 8014 as well.

Regards,

Thomas

yes you can able to change port

Symantec Endpoint Protection 12.1: How to change the ports used for communication between the Manager and clients

Thanks again James. This is great.