Endpoint Protection Small Business Edition

Good Day,

We are interested in using this product on 3 of our business servers.
A file server, terminal server and a web server.

We are having a hard time finding links and documentation on the said above servers so we may
further investigate.

We are interested in knowing as much as we can to make a complete adjustment and be
ready for any possible pitfalls.

The servers are Microsoft servers 2008 and 2012

Any and all help is much appreciated.

We thank you for your time.

Best Regards,

Are you installing AV only?

Good read here:

Installation best practices for Endpoint Protection on Windows servers

Hi Brian,

Yes we are interested in the SEP SBE (.cloud) client protection on our servers.

I appreciated the link and will review today.

Note: So far we created and are trying out the Server specific install client from this product

on a Web server.

The results from Intrusion prevention are good since there seems to be some unwanted IP addresses

trying to intrude.

Hi All,

Searching Symantec FAQ, I have come across an interesting topic and would like to post and share here with this topic:

We want to put Endpoint Protection on our terminal server but do not fully understand how the service works when set up that way. Can you explain?

FAQ

When Endpoint Protection is installed on a terminal server, the server runs an application engine. The server delivers antivirus and Spyware Protection for all of the logon sessions to the terminal server. As computers connect to the terminal server, each new connection opens a separate session to run the user interface. The server installation enables multiple users to get independent access to the application as needed.

These sessions appear as multiple instances of ccApp.exe and SmcGuid.exe in the server processes listing; 64-bit terminal servers also display multiple instances of ProtectionUtilSurrogate.exe. The design endeavors to minimize resource consumption by these connections, however, for a heavily loaded terminal server you may need to modify the registry. The Symantec User Forum documents several registry tweaks in this thread:

Symantec User Forum.

http://www.symantec.com/connect/forums/sep-11-and-terminal-server-or-citrix

in MR3, SmcGui should be less resource intensive anyway (each version gets more new, better optimised code) however, in order to prevent SmcGui from loading for each user session you can now use the following registry key (rather than renaming SmcGui)

HKLM\SOFTWARE\Symantec\Symantec\Endpoint Protection\SMC\LaunchSmcGui

Set it to DWORD 0, rather than DWORD 1

Message Edited by Paul Murgatroyd on 10-07-2008 02:12 AM

Message Edited by Paul Murgatroyd on 10-15-2008 09:27 PM

Hi Brian,

The link provided is exactly what I am looking for.

Thank You so much.