Endpoint Protection

 View Only
  • 1.  SEPM migration/layout questions

    Posted May 03, 2010 03:41 PM
    Hi, SCENARIO: We have about 500 computers (WXPSP3) with SAV10 installed. 480 computers are in the same physical site and they have access to the SEPM server via LAN. 10 computers are on a branccoffice1 for which we have a WAN with a T1 leased line. The other 10 comptuers left are on a branchoffice2 for which we have another WAN with T1. For the migration we are planning to customize SEP install packages poiting to a computer collection (for example HR, Accounting, etc. and have this computer collections configured with the policy we want to push to the computers. The package is going to be launched by SCCM to target specific computers. Logon script is not an option because it has to be done via users and they can be remote users jumping between computers. QUESTIONS: 1.)According to the scenario above specified it sufficient to install a single SEPM server that will get the definition files from the Symatec server and then deploy to the computers? 2.)If another server is needed how should the setup has to be done? 3.)Do we need to install a second server with Live Updates? If that is the case could someone clarify how does this process works basically what is the Live Update (LAN) doing? If the Live update is in place what is its role? Are the users getting the definition files from it or the SEPM server? If Live Update is needed can we use a Windows XP or do we need to use Windows Server? 4.)If a single SEPM server is sufficient do we need to install something on the Brachoffices so that the computers can get the definition files? If something is needed can you please point me out to the setup? I have seen that there are some videos about the SEP configuration. If someone could provide the links to compliment the anwsers that would be great! Thank you in advanced.


  • 2.  RE: SEPM migration/layout questions

    Posted May 06, 2010 03:01 PM

    For starters check out these two documents - Top 10 Symantec Best Practices - Deploying Symantec Endpoint Protection Architecture

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009012721190648



    SEP11 Frequently Asked Question

    https://www-secure.symantec.com/connect/articles/sep11-frequently-asked-questions-file

    Best,
    Thomas


  • 3.  RE: SEPM migration/layout questions

    Posted May 07, 2010 09:43 AM
    For your branch offices GUP is a good option.Select one PC in the Branch as GUP,this PC will download updates for all other PCs in the branch.have a look at this KB
    Symantec Endpoint Protection 11.0 Group Update Provider (GUP)