Endpoint Protection

 View Only
Expand all | Collapse all
Adamster

AdamsterFeb 16, 2015 12:20 PM

  • 1.  SEPM Updates

    Posted Feb 16, 2015 12:15 PM

    Hello,

     

    We have 5 SEPM servers in a site.  If out of Five, only one can get to the internet, will the updates be replicated to all of the SEPM servers, or do all five have to be able to download from symantec?



  • 2.  RE: SEPM Updates

    Posted Feb 16, 2015 12:15 PM

    Yep just make sure to replicate LU content. It's one of the options you can check when setting up replication.

    Specifying which data to replicate

    "You can choose to replicate or duplicate client packages, LiveUpdate content, and the logs between the local site and the remote site. The administrator at the remote site can then deploy the client package and LiveUpdate content."

    Setting up sites and replication



  • 3.  RE: SEPM Updates

    Posted Feb 16, 2015 12:20 PM

    all servers are within 1 site.



  • 4.  RE: SEPM Updates

    Posted Feb 16, 2015 12:24 PM

    That's fine. If they're replicating, you can decide what you want to replicate. LU content is one of the options



  • 5.  RE: SEPM Updates

    Posted Feb 16, 2015 12:32 PM

    I clicked on local site, and chose add an existing replication partner, then it asked for the remote site information, i put in the ip of the server i want to replicate to, then it is asking for System Administrator username and password, is that windows, Symantec username or password or SQL SA account, I tried all.



  • 6.  RE: SEPM Updates
    Best Answer

    Posted Feb 16, 2015 12:34 PM

    Are you using Windows or SQL authentication?

    If Windows make sure to include in the domain\username when entering the username



  • 7.  RE: SEPM Updates

    Posted Feb 16, 2015 12:36 PM

    i think its a port issue, can i do the replication on port 8014 since that is open?



  • 8.  RE: SEPM Updates

    Posted Feb 16, 2015 12:40 PM

    8014 is only used for client/server comms. 8443 is used for replication so you would need to use something else.

    How to change server port 8443 of the Symantec Endpoint Protection Manager



  • 9.  RE: SEPM Updates

    Posted Feb 16, 2015 01:00 PM

    Erm, this entire thread seems to have moved away from the initial question, so I'll do what I can to address everything raised.

    1. If all the SEPMs are part of the same site (i.e. all share the same DB) then if any one SEPM does the LU, they will all be aware of the new content via the shared DB.
    2. When setting up a replication partner, the SEPM setup asks for an account on the other SEP Site that has System Administrator privileges (i.e. default "admin" account in the SEPM is commonly used).

    Again, 2 should be irrelevant as you have all SEPMs in the same site.



  • 10.  RE: SEPM Updates

    Posted Feb 16, 2015 01:06 PM

    Good Evening

    Actually we have 25 systems based on a server if we purchse Norton Security and Norton Security with Backup for all the systems then how much data we can save & how can save from server. Please let us know ASAP.



  • 11.  RE: SEPM Updates

    Posted Feb 16, 2015 01:06 PM

    Oh yeah, something you'll want to add into your setup (as only 1 of the 5 SEPMs can access the interwebs) is the option described int he below article:

    http://www.symantec.com/docs/TECH136648

    Without this, any one of the SEPMs could be trying (and failing!) the LU attempt.  Adding this property allows you to control which one does the actual updating (i.e. the one with access to Symantec).



  • 12.  RE: SEPM Updates

    Posted Feb 16, 2015 01:15 PM

    Thank you.

     

    For #1.  just to clarify, the other servers will be aware of the new content, but won't actually have it to provide to clients, correct?



  • 13.  RE: SEPM Updates

    Posted Feb 16, 2015 01:16 PM

    Kauiex,

     

    You may want to start a new thread, this thread is to discuss a different issue.

     

    Thank you.



  • 14.  RE: SEPM Updates

    Posted Feb 17, 2015 03:31 AM

    Sure they will.

    It is possible (as per the article I linked) for only a single SEPM in a site to perform the LU.  It will process the defs and write them to the DB.  Once in the DB, the other SEPMs will then pull the defs out locally to their own local folder structure and distribute to clients as normal.