Hello,

   For some SEP clients, I have to schedule definition updates from SEPM server. Is it possible? Please help.

Regards,

Tabish

From SEPM server its not possible, it will take updates based on heart beat , push mode or pull mode..

#Edit

You can Schedule definition updates for SEPM once SEPM can update SEP client automatic update

Once SEPM Server Update

How client computers receive content updates

See this thread also

http://www.symantec.com/connect/forums/how-setup-symantec-endpoint-protection-client-update-schedule

See mithun comments how will be Schedule defination in SEPM

http://www.symantec.com/connect/forums/system-running-slow

its all based on heartbeat you have set. Depending on the heartbeat interval client will check with SEPM and if there's a new content then it wil be downloaded.

Hi

You can set the heartbeat interval so that clients will communicate with SEPM at regular intervals

Regards

Lot's of "you can do this" and "or you can do that" in this thread to attempt a poor mimic of scheduling. Seems very common in these forums.

The answer to the direct question asked is simply No, as stated by one person. If the SEPM is to be the source of updates for your endpoint it cannot be scheduled. Likewise with a GUP.

Scheduling is only supported when you point machines to Symantec's public servers on the Internet, or a LiveUpdate Administrator server. The former wastes WAN bandwidth (or may not be permitted), and the latter requires extra infrastrcture and creates further management. To an extent it's supposed to be "set and forget" but hungry for storage more so than a SEPM and is far from bug free, Regular failures occur requiring intervention.

The whole limitation in SEPMs and GUPs is due to the nature of the SEP design. I've commented to Symantec product mgmt reps that this behavior needs to change, and a syncing option needs to be added as an option. Allowing a GUP to sync with its SEPM, and you now have the ability to allow scheduling, because the GUP no longer needs the SEPM to tell it what it needs to obtain on behalf of the endpoint. Or re-worded the endpoint now no longer needs to rely on the SEPM to calculate and create the deltas that the GUP then needs to obtain.

However, Symantec are clearly hesitant to allow this, due to the size of their updates. The entire signature size limitations and complexity of Symantec solutions is what limits their ability to improve on this distribution architecture. For the same definitions you have SO many packages. One for 32-bit, one for 64-bit, then other platforms, then certain SEP versions, i.e. GM, RU2, RU4. GBs of daily data for large enterprises. It's crazy. Other vendors, the same definitions regardless of product of platform.

One hopes for some great advances in future major releases.

There is no way to schedule defs updates from SEPM to clients - the client get the updates according to:

- in PULL mode - heartbeat setting defines when the client connects to sEPM and ask for defs updates

- in PUSH mode - client gets updates as soon as SEPM has them

If you have specific scheduling requirements for when your clients are allowed to perform an update, then I'm afraid you're looking at the SEP->LiveUpdate option, rather than SEP->SEPM.

Updates using the LiveUpdate Client (SEP11) or LiveUpdate Engine (SEP12.1) can be scheduled.  The issue is that doing so means either pointing the clients out at Symantec over the internet for the defs, or setting up an Internal LiveUpdate Administrator (LUA) server to act as an internal repository for defs.  It's also worth noting that this method of updates also generates more network load, but the scheduling options usually mitigate this quite nicely.

More info on the LUA below:
http://www.symantec.com/docs/HOWTO41810

SEPM lacks the ability to schedule updates to the clients. It's all based on heartbeat setting. When clients check in, if new defs are available, they will begin the process to obtain them.

The only way to schedule updates is with an unmanaged client or if you send your managed clients out to Symantec LU. I doubt you want to do this.

I would suggest setting up GUPs to help lighten the load on bandwidth.

Did you need more help here ?

Hi

You can set the heart beat interval to take the definitions and policies

Regards