Endpoint Protection

 View Only
  • 1.  SEPM Link To Another SEPM

    Posted Nov 12, 2013 08:11 AM

    Hi,

    We have a setup of SEPM 12.1.1 (SEPM1) in our production environment which is all working great for what we need. However it has been requested to have an additional SEPM 12.1.4 (SEPM2) server configured as follows...

    Production SEPM1 currently retrieves updates from Symantec (default configuration), whereas we require this to be the main update repository for the SEPM2 server which will have no access to the internet.

    My question is this... in order to configure SEPM2 server to retrieve updates from SEPM1, what do I need to configure in the below fields...

    Source Server.jpg

    LiveUpdate Policy.jpg

    Also, please advise what protocols will need allowing through any firewalls in place (we have 2 in place between these 2 SEPM servers).

    Thanks.

    Adam.

     



  • 2.  RE: SEPM Link To Another SEPM

    Posted Nov 12, 2013 08:20 AM

    It cannot get update from SEPM, however it will get update from Liveudpate administrator

    How to configure LiveUpdate to use alternate sources through the Symantec Endpoint Protection Manager Console

     
     

     



  • 3.  RE: SEPM Link To Another SEPM

    Posted Nov 12, 2013 08:26 AM

    So just to clarify, after installing LUA, I configure both of the above URLs for the Source Server and Internal LU Server as the new LUA server (or whatever server the LUA application is installed on)?

    Thanks.

    Adam.



  • 4.  RE: SEPM Link To Another SEPM

    Posted Nov 12, 2013 08:29 AM

    Hello,

    during the installation (not after) set the new SEPM up as replication partner of the first one and ensure the content replication is enabled. If SEPM2 is already installed as stand-alone console, reinstall it.

    Another advantage of the replication is that you will replicate groups, clients and policies, hence the administration of the two consoles will be easier; logs too if you want/need it.

    You need to allow bidirectional traffic on port 8443 on both servers.



  • 5.  RE: SEPM Link To Another SEPM
    Best Answer

    Posted Nov 12, 2013 08:33 AM

    Install LUadministrator on any server in your network (not on SEPM please)

    You will then select what products to download in Luadmin ( Select SEP)

    on both the  SEPM you will point the URL of Luadmin, which ends with clu-prod.

    Now both your sepm will get update from Luadmin.

    http://www.symantec.com/business/support/index?page=content&id=TECH102467

    If you configure sites on your network for replication from another site, the content updates (AV definitions and so on) that are in the database of the primary site can be configured to replicate as part of the database. In this case, you only need to configure updates on the primary site.