Endpoint Protection

We have a client which has workstations which don't have direct internet connection.

For applications we can specify a web proxy, so windows updates etc. still work.

In Symantec Endpoint Protection client can be configured to use the proxy for client management and for live update.

For Windows 7 and up this works fine.

For Windows XP the proxy works for live update, but not for the client management.

The SEP client on Windows XP can't connect to the management server, unlesse we set the global system proxy. But then all other applications & webbrowser also have internet connection, which is not what we need.

The SEP version used is 12.1.5337.5000

Does windows XP client are managed client ?

have you try to change sylink.xml,after replace sylink.xml sep client will be update direct SEPM console.

Proxy setup should only be needed for LU access.

The management server is external, so it has to use the proxy...

Yes, they are managed.

The MGMT server is external to the company LAN, so it has to go via proxy to access it.

This works in Windows 7, but not with XP (Same settings)

Check below articles if help you

How to set proxy settings in Java LiveUpdate

https://support.symantec.com/en_US/article.TECH100706.html

Sounds more like an issue related to xp and what changed in 7

I must admit, I'm a little curious as to how you have this configured in SEP.

I'm not aware of an option to specify a proxy server specifically for client communications.  You've got the "External Communications" settings, which specify a proxy for Insight lookups and the like.  You've got the proxy settings for the LiveUpdate engine.  For client communications, the client uses either the system or the user's proxy settings as described in the below article:

https://support.symantec.com/en_US/article.TECH205352.html

Can you give us a little more info on what you have configured?  Does the MSL point at the proxy, which then relays traffic to the external SEPM?  Can you see the XP clients hitting the proxy at all?

I will be on the customer site the 1.May and report back with more details/infos.

Thanks so far.