Endpoint Protection

 View Only
  • 1.  SEP - Liveupdate scheduling question

    Posted Nov 21, 2012 11:34 PM

    Hi

    I would like to schedule one particular machine to get av definitions at say 3am in the morning, on daily occurrance.

    We are using SEPM to perform liveupdate and deploy updates to the clients. SEPM performs liveupdate every 4 hours.

     

    If i want to schedule liveupdate for a prticular machine, i believe i need to enable "use a live update server" from the server settings in the Liveupdate policy.

    Now if i do this, and disable "Use the default management server", i believe i will get the updates for this machine direct from symantec website.

     

    What will happen if i enable both options?

    "use a live update server" and "Use the default management server"?

    Will this client get the update from either the Symantec website or the Management server at 3am only? OR would it receive the the updates from the SEPM, whenever it gets new updates and also from Symantec website at 3am?

     

    Thanks

    DM

     



  • 2.  RE: SEP - Liveupdate scheduling question

    Posted Nov 22, 2012 12:21 AM

    Hi Dmkory

     

    Create a New Group Under MyCompany and move that particular client under it. Uncheck the Policy Inheritance. Create a New Live Upadate Policy with Use the Live Update Server Option Enabled and schedule it accordingly.



  • 3.  RE: SEP - Liveupdate scheduling question

    Posted Nov 22, 2012 12:39 AM

    HI,

    Yes you can create new SEP group and move particular system this group.

    You can create non shared SEP live update policy.

    Symantec Endpoint Protection Manager - LiveUpdate - Policies explained

    http://www.symantec.com/docs/TECH104435



  • 4.  RE: SEP - Liveupdate scheduling question

    Posted Nov 22, 2012 03:52 AM

    If both the "Use Default manager server" and the "Use LiveUpdate Server" options are checked, then the client will use both.  The client will get updates from the SEPM *and* check the Symantec LiveUpdate servers at 3am.

    As others have mentioned, if you want a single client to update at a specific time only, then you'll have to assign a policy that only enables the "Use LiveUpdate Server" option.  You should also verify (if using 12.1) that the LiveUpdate Skipping options under the LiveUpdate Schedule section of the policy, are disabled.