Endpoint Protection

People,

Can anyone show to me how to best configure my DMZ SEPM to Synch / replciate with Internal production SEPM server which can download the update from the internet ?

Because ever since I have seen in this forum, usingSEPM and Live Update server is not recommended. But the problem is that all of my SEP client in DMZ points to the SEPM in DMZ which cannot get the update from the old LUA server ?

Thanks.

Replication Considerations:

By default, the first SEPM in a site is responsible for responding to and processing replication events from other sites.  If there are multiple SEPMs in a site, you can change this setting by editing the Replication Management Server List in the Replication Partner Properties in the Admin > Servers view.

• If the SEPM in the DMZ is the first of multiple SEPMs in a site, Symantec recommends modifying the Replication Management Server List and nominating a different SEPM to process the replication events.

• If the SEPM in the DMZ is the only SEPM in the Site, then port 8443 will need to be opened on the firewall.

http://www.symantec.com/business/support/index?page=content&id=TECH178325

ok, so between the SEPM servers, port 8443 needs to be opened to allow replication ?

the Internal VLAN SEPM is the first SEPM so i can say that this is the primary while the DMZ SEPM is the secondary.

Yes..

many thanks once again for the confirmation.