Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Running SEP in a closed network.

Updated: 21 May 2010 | 6 comments
SRK-DK's picture
0 0 Votes
Login to vote

How do I update Threat Protection in a closed network environment.? I have a medium large setup with about 100 clients and 200 servers in a closed network with no connection to the Internet.
Is it possible to update Threat Protection without the system is connected to the Internet.?

Comments

pete_4u2002's picture
22
Jun
2009
0 Votes 0
Login to vote

are these systems

are these systems communicate to SEPM? Is the SEPM able to download and update the definition ( i.e. connected to internet)? if yes, then only client will be able to update.

there is no way of manually updating the NTP or PTP defs.

cheers
Pete

SRK-DK's picture
22
Jun
2009
0 Votes 0
Login to vote

Thanks for the reply. Yes all

Thanks for the reply.

Yes all hosts are managed by the SEPM – SEPM is not connected to the Internet.
So I guess there is no way..

kavin's picture
22
Jun
2009
0 Votes 0
Login to vote

There is a way You can try to

There is a way You can try to configure the Liveupdate server & try to connect your SEPM to the LUA but for that you will need your LUA to be in network that has internet connectivity.
& SEPM should be able to talk to LUA.

SRK-DK's picture
22
Jun
2009
0 Votes 0
Login to vote

Yes this could be the

Yes this could be the solution, having the LUA connected to the Internet and disconnected to the SEPM – When clients are updated the LUA is disconnected from the Internet and connected to the SEPM. Would this give any problems, beside the manual work..?

Jason1222's picture
22
Jun
2009
0 Votes 0
Login to vote

If you have the capability

If you have the capability of getting onto the Internet from a different machine, Dial-up, direct connection, etc. 
You could always consider manually updating the SEPM server on a daily basis. 

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008030710560348

This will allow you to download the necessary files for AV/AS etc. at your convenience and place them into the server whenever you are ready to do so.  It would save you the time of configuring a LUA server, the cost of the machine, etc.  As well as the leg work of; plugging it to the internet, downloading definitions, disconnecting from the Internet, connecting to the network, updating server, and than distributing the definitions. 

You could possibly do this from home or any Internet connection. 

Just my 2 cents.

tanyc's picture
22
Jun
2009
0 Votes 0
Login to vote

Hi, This kb will

Hi,

This kb will help....http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100820002048

Download the file daily and upload into your SEPM and it will push down to your clients in closed network.
Follow the kb i give u. Its very details. However it only updates the AV/AS. The others are not updated.

Hope it helps~