Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SEPM/LiveUpdate for Macintosh Clients

Created: 30 Mar 2013 | 3 comments

I work as a network admin (and sadly the main network security guru) for a medium-sized, mostly Windows domain. However, we have a handful (roughly 20-30) Macintosh computers that are a part of the domain, and I need to configure Symantec Endpoint Protection Manager to support them. This includes LiveUpdate and client deployment.

I've already discovered how to deploy the client software initially, thanks to some web searches, but my basic problem is this: How do I then ensure they are kept up-to-date? For the Windows environments, I know that SEPM updates not only the definitions, but the client version as well to the install package(s) configured. That said, I cannot seem to add my company's Mac client install package (which already exists in the "Install Packages" area, though it is listed as version 11.0.7101.0236 for Mac, whereas the Windows versions are 12.1.1000.157) to the "Clients" tab, nor can I include the Macintosh as an included platform on the LiveUpdate tab of the Site Properties. I am configured as a full admin in SEPM, so theoretically, I can screw up anything needed.

Am I doing something wrong, though? Am I missing the blatantly obvious? Does my company need to purchase a different type of license to include in SEPM for managing Mac clients? Any assistance with this would be appreciated.

Operating Systems:

Comments 3 CommentsJump to latest comment

W007's picture

hello,

You don't need to purchases additional license

Just follow best practices

https://www-secure.symantec.com/connect/articles/sep-121-top-articles-and-best-practices

Symantec Endpoint Protection 12.1: Installing the Manager for the first time and deploying clients

 

Article:TECH163580 | Created: 2011-06-29 | Updated: 2011-07-01 | Article URL http://www.symantec.com/docs/TECH163580

 

Symantec Endpoint Protection for Macintosh Frequently Asked Questions

 

Article:TECH134203 | Created: 2010-01-24 | Updated: 2013-03-14 | Article URL http://www.symantec.com/docs/TECH134203

Installing Symantec Endpoint Protection for Macintosh

 

Article:TECH131675 | Created: 2010-01-13 | Updated: 2012-04-24 | Article URL http://www.symantec.com/docs/TECH131675

 

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SebastianZ's picture

That said, I cannot seem to add my company's Mac client install package (which already exists in the "Install Packages" area, though it is listed as version 11.0.7101.0236 for Mac, whereas the Windows versions are 12.1.1000.157) to the "Clients" tab...

 

To import newer MAC install packages to the SEPM console just follow the below articles:

http://www.symantec.com/docs/TECH131675

http://www.symantec.com/docs/TECH183884

...the MAC packages (.info file) will be available on the SEP installation media as indicated in one of the above articles -> this way you can provide SEPM with newest version of SEP for MAC.

Unfortunately it is not possible to use the Autoupgrade SEPM feature to assign the MAC packages for groups [Clients Tab] (this option works only for windows clients) - see here more in FAQ for MAC:

http://www.symantec.com/docs/TECH134203

Q. What about upgrading SEP for Mac to a newer version?  Can I use Upgrade Groups with Package (auto-upgrade)?
A. Unfortunately, you must export a client package for the new version then install or deploy as you would a new installation; it is not possible to use the Upgrade Groups with Package wizard (auto-upgrade) to migrate Macintosh clients up to a higher build.  However, you can install the new version directly over the old without uninstalling first.

 

...nor can I include the Macintosh as an included platform on the LiveUpdate tab of the Site Properties.

The Admin-> Server-> Local Site -> Site Properties -> Liveupdate -> these settings are only for SEPM downloads from Symantec Internet Servers.

To inlude MAC downloads here do the following:

 

1. The Admin-> Server-> Local Site -> Site Properties -> Liveupdate -> Platforms to download -> Add MAC

2. In thge Liveupdate policy assigned to MAC clients, edit the MAC Settings -> Server Setting and check the use if the default Symantec Liveupdate Server for retrieving the updates (you can set here as well schedule for downloads here)

 

Mick2009's picture

Hi GamerCoar,

Just adding to the above advice.... Windows clients can receive their AV definitions and other content from the SEPM, but SEP fro Mac machines must download their definitions either from the Internet or from an internal LiveUpdate Administrator 2.x server.

As there are just 20-30 Macs, you are probably best keeping them updating from the Internet.  If you wish to learn more about LUA, here are a couple good links:

Using the LiveUpdate Administrator 2.x to download updates for Symantec Endpoint Protection for Macintosh
http://www.symantec.com/docs/TECH103198 
 

A Helpful LiveUpdate Administrator 2.x Analogy
http://www.symantec.com/connect/articles/helpful-liveupdate-administrator-2x-analogy

LUA Installation and configuration
http://www.symantec.com/connect/articles/installation-and-configuration-lua

Configuring Distribution Center in LUA
http://www.symantec.com/connect/articles/configuring-distribution-center-lua

 

Hope this helps!

Mick

With thanks and best regards,

Mick