Endpoint Protection

 View Only
  • 1.  SEPM/LiveUpdate for Macintosh Clients

    Posted Mar 30, 2013 06:41 AM

    I work as a network admin (and sadly the main network security guru) for a medium-sized, mostly Windows domain. However, we have a handful (roughly 20-30) Macintosh computers that are a part of the domain, and I need to configure Symantec Endpoint Protection Manager to support them. This includes LiveUpdate and client deployment.

    I've already discovered how to deploy the client software initially, thanks to some web searches, but my basic problem is this: How do I then ensure they are kept up-to-date? For the Windows environments, I know that SEPM updates not only the definitions, but the client version as well to the install package(s) configured. That said, I cannot seem to add my company's Mac client install package (which already exists in the "Install Packages" area, though it is listed as version 11.0.7101.0236 for Mac, whereas the Windows versions are 12.1.1000.157) to the "Clients" tab, nor can I include the Macintosh as an included platform on the LiveUpdate tab of the Site Properties. I am configured as a full admin in SEPM, so theoretically, I can screw up anything needed.

    Am I doing something wrong, though? Am I missing the blatantly obvious? Does my company need to purchase a different type of license to include in SEPM for managing Mac clients? Any assistance with this would be appreciated.



  • 2.  RE: SEPM/LiveUpdate for Macintosh Clients

    Posted Mar 30, 2013 07:11 AM

    hello,

    You don't need to purchases additional license

    Just follow best practices

    https://www-secure.symantec.com/connect/articles/sep-121-top-articles-and-best-practices

    Symantec Endpoint Protection 12.1: Installing the Manager for the first time and deploying clients

     

    Article:TECH163580 | Created: 2011-06-29 | Updated: 2011-07-01 | Article URL http://www.symantec.com/docs/TECH163580

     

    Symantec Endpoint Protection for Macintosh Frequently Asked Questions

     

    Article:TECH134203 | Created: 2010-01-24 | Updated: 2013-03-14 | Article URL http://www.symantec.com/docs/TECH134203

    Installing Symantec Endpoint Protection for Macintosh

     

    Article:TECH131675 | Created: 2010-01-13 | Updated: 2012-04-24 | Article URL http://www.symantec.com/docs/TECH131675

     



  • 3.  RE: SEPM/LiveUpdate for Macintosh Clients

    Posted Mar 30, 2013 08:15 AM

    That said, I cannot seem to add my company's Mac client install package (which already exists in the "Install Packages" area, though it is listed as version 11.0.7101.0236 for Mac, whereas the Windows versions are 12.1.1000.157) to the "Clients" tab...

     

    To import newer MAC install packages to the SEPM console just follow the below articles:

    http://www.symantec.com/docs/TECH131675

    http://www.symantec.com/docs/TECH183884

    ...the MAC packages (.info file) will be available on the SEP installation media as indicated in one of the above articles -> this way you can provide SEPM with newest version of SEP for MAC.

    Unfortunately it is not possible to use the Autoupgrade SEPM feature to assign the MAC packages for groups [Clients Tab] (this option works only for windows clients) - see here more in FAQ for MAC:

    http://www.symantec.com/docs/TECH134203

    Q. What about upgrading SEP for Mac to a newer version?  Can I use Upgrade Groups with Package (auto-upgrade)?
    A. Unfortunately, you must export a client package for the new version then install or deploy as you would a new installation; it is not possible to use the Upgrade Groups with Package wizard (auto-upgrade) to migrate Macintosh clients up to a higher build.  However, you can install the new version directly over the old without uninstalling first.

     

    ...nor can I include the Macintosh as an included platform on the LiveUpdate tab of the Site Properties.

    The Admin-> Server-> Local Site -> Site Properties -> Liveupdate -> these settings are only for SEPM downloads from Symantec Internet Servers.

    To inlude MAC downloads here do the following:

     

    1. The Admin-> Server-> Local Site -> Site Properties -> Liveupdate -> Platforms to download -> Add MAC

    2. In thge Liveupdate policy assigned to MAC clients, edit the MAC Settings -> Server Setting and check the use if the default Symantec Liveupdate Server for retrieving the updates (you can set here as well schedule for downloads here)

     



  • 4.  RE: SEPM/LiveUpdate for Macintosh Clients

    Posted Apr 01, 2013 07:01 AM

    Hi GamerCoar,

    Just adding to the above advice.... Windows clients can receive their AV definitions and other content from the SEPM, but SEP fro Mac machines must download their definitions either from the Internet or from an internal LiveUpdate Administrator 2.x server.

    As there are just 20-30 Macs, you are probably best keeping them updating from the Internet.  If you wish to learn more about LUA, here are a couple good links:

    Using the LiveUpdate Administrator 2.x to download updates for Symantec Endpoint Protection for Macintosh
    http://www.symantec.com/docs/TECH103198 
     

    A Helpful LiveUpdate Administrator 2.x Analogy
    http://www.symantec.com/connect/articles/helpful-liveupdate-administrator-2x-analogy

    LUA Installation and configuration
    http://www.symantec.com/connect/articles/installation-and-configuration-lua

    Configuring Distribution Center in LUA
    http://www.symantec.com/connect/articles/configuring-distribution-center-lua

     

    Hope this helps!

    Mick