Video Screencast Help
Give us your opinion and win with Symantec! Please help us by taking this survey to tell us about your experience with Symantec Connect, so that we can continue to grow and improve.  Take the survey.

SEP Manager facing the internet

Created: 25 Sep 2013 | 4 comments

Hey,

I just have a short question. But the issue is not so easy. 

I am not sure if it will be a good idea but I need to install a SEP Manager (12.1.3001) that faces the internet to connect clients that were traveling around the world. Is the application secure. Are there no security holes? Is the tomcat version the current one?

I am not sure but are other customers doing the same?

thx

Operating Systems:

Comments 4 CommentsJump to latest comment

Brɨan's picture

You'll want to follow the best practice guide from Symantec which shows what you need to open:

Best Practices: Configuring a Symantec Endpoint Protection environment in a DMZ

padding: 1px;padding-bottom: 3px ;font: 12px Arial; text-align: left;">Article:TECH178325 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 0px;font: 12px Arial; text-align: left;">Created: 2012-01-05 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 1px;font: 12px Arial; text-align: left;">Updated: 2012-01-05 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 1px;font: 12px Arial; text-align: left;">Article URL http://www.symantec.com/docs/TECH178325

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Christoph_A's picture

Hi,

thank you for the article. Do you have a SCSP policy set for SEPM? I am sure that SEPM is designed also to run in a DMZ and is monitored by several CERTs. Is tomcat and all containig code reviewed?

Brɨan's picture

I do not have a SEPM deployed in a DMZ so I cannot speak from experience. As for tomcat, I don't believe it is updated unless a new release comes out with updated code. Symantec would need to confirm.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Brɨan's picture

Do you need more assistance with your problem or were you able to get it resolved?

If you could post an update for followers of this thread that would be most helpful.

Otherwise, if resolved, you can close the thread out by clicking the "Mark as solution" link at the bottom left on the most helpful post. This will benefit admins looking for a resolution to the same problem.

Thanks and take care,
Brian

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.