Endpoint Protection

 View Only
Expand all | Collapse all

SEP 12.1.5 on non X-window linux machine

  • 1.  SEP 12.1.5 on non X-window linux machine

    Posted Oct 30, 2014 02:28 PM

    I have a linux server I have installed SEP 12.1.5 on as a mangaged client.  Its running fine and shows up in the SEPM console. However, I cannot figure out how to configure the LiveUpdate with out using the GUI tools.  This machine doesn't have X windows on it and I access it normally through SSH.  How can I configure the LiveUpdate settings such as proxy, LiveUpdate server, etc through the command line?
     



  • 2.  RE: SEP 12.1.5 on non X-window linux machine

    Posted Oct 30, 2014 02:38 PM

    See Micks articles on it:

    https://www-secure.symantec.com/connect/articles/sav-linux-somewhat-illustrated-guide-part-2

    https://www-secure.symantec.com/connect/articles/sav-linux-somewhat-illustrated-guide-part-3



  • 3.  RE: SEP 12.1.5 on non X-window linux machine

    Posted Oct 30, 2014 02:38 PM

    this should help you

    https://www-secure.symantec.com/connect/articles/sav-linux-somewhat-illustrated-guide-part-3



  • 4.  RE: SEP 12.1.5 on non X-window linux machine

    Posted Oct 30, 2014 02:44 PM

    I seen the information on using a GUI to change the encrypted liveupdate.conf but nothing on command line.



  • 5.  RE: SEP 12.1.5 on non X-window linux machine

    Posted Oct 30, 2014 02:49 PM

    AFAIk that is the only way



  • 6.  RE: SEP 12.1.5 on non X-window linux machine

    Posted Oct 30, 2014 02:49 PM

    From within the /opt/Symantec/symantec_antivirus directory:

    sudo ./symcfg add -k '\Symantec Endpoint Protection\AV\PatternManager\Schedule' -v Enabled -d 1 -t REG_DWORD

    http://www.symantec.com/business/support/index?page=content&id=TECH98223



  • 7.  RE: SEP 12.1.5 on non X-window linux machine

    Posted Oct 30, 2014 03:01 PM

    you can make the changes on other machine which has the GUI and replace the .conf file on this one



  • 8.  RE: SEP 12.1.5 on non X-window linux machine

    Posted Oct 30, 2014 03:24 PM

    Unless I'm missing something I didn't see a way to set the proxy information with out using a GUI.  Using the config editor and creating a GRC.dat would allow me to set the live update to an internal server but right now I'm most interested in setting the proxy to allow the SEP client to update its defs.  Using the intellegent updater is also a possible solution but the size of it is very large and I had issues getting that to work do to a small /tmp directory (its on a drive about 350 MB in size even with setting the environment variable SYMANTEC_TMP to a directory in my /var drive that has tons of space).



  • 9.  RE: SEP 12.1.5 on non X-window linux machine

    Posted Oct 30, 2014 03:27 PM

    Thanks for the reply, but I really need to find away to set the various settings not nessary turn live update on or off.



  • 10.  RE: SEP 12.1.5 on non X-window linux machine
    Best Answer

    Posted Oct 31, 2014 10:52 AM

    Looks like there wasn't a need to set the proxy as LiveUpdate seems to use the proxy either from autoproxy detection or from the enviromental varible http_proxy.  My system wasn't updating do to the small /tmp drive and / drive.  I increased the size of these and LiveUpdate worked.  I would still like to find a simple way to change the LiveUpdate server from the command line but I can live with just using the defaults for now.



  • 11.  RE: SEP 12.1.5 on non X-window linux machine

    Broadcom Employee
    Posted Oct 31, 2014 11:10 AM
      |   view attached

    Hi,

    I have attached linux reference guide. Go to the command line reference, it will give a list of all available command line options.

    Setting up an external LiveUpdate server for Symantec Endpoint Protection clients

    http://www.symantec.com/docs/HOWTO81007 

    Attachment(s)