Endpoint Protection

Good Morning All!

In previous version of SEP, we kept Mac OX clients in a separate folder in because we were told that Mac clients get separate type of policies than Windows computers.

Is this also true for SEP 12 RU2? Do we still need to keep all Macs in separate folders than Windows, or are the policies same and we can keep both Mac clients and Windows clients in same folder.

In our organization, we keep clients in separate folders based on their site location, and many sites have different operating system of computers.

As far as I know keeping Mac clients in separate groups is not a strict requirement - please have a look at:

http://www.symantec.com/docs/TECH134203

...it is recommended due to the fact that MAC SeP clients will get the updates only from Internet Liveupdate and not from the policy assigned SEPM for example - which mostly takes place for windows clients.

When you open the Virus and Spyware Protection policy, it is for both Windows and Mac clients. I don't see why keeping them in different folders would make a difference reagrding the policy.

I would simply do it for ease of management.

Since 12.1 is a different product compared to 11.x, I don't think I would worry about this any longer.

Ok, I will keep separate folder for Mac foe ease of management.

It used to be that the biggest reason to keep them separated was for the LiveUpdate policy/schedule. Since Macs can only get content updates via LiveUpdate, it was a good idea to keep LiveUpdate enabled and scheduled, but you didn't necessarily want that for the Windows computers. Settings were not separated by OS type.

With 12.1, the LiveUpdate policy has a separate section in the same policy for Macs as for Windows, so the same policy can be applied to both types of computers. The Windows Settings only applies to Windows computers, and the Mac Settings only apply to Macs. (See attached image.)

If you want to keep them separated for another reason, then that's perfectly OK. :)

sandra