Video Screencast Help

Standalone Endpoint Update

Created: 30 Sep 2008 • Updated: 21 May 2010 | 23 comments

We are looking to upgrade our laptops to Endpoint v.11 but everything we have is standalone therefore we cannot use a server to push out the updates.  Can someone please tell me how to do updates to both the virus potection piece and the firewall piece on standalone laptops.

 

Thank you.

Comments 23 CommentsJump to latest comment

EricB-BSN's picture

Ok, once I export an unmanaged package where does it need to go on the laptop in order for the programs to be updated or can it just be executed and it will do it's job?  Are these unmanged packages in the same location on symantec's website as all the other updates?

 

Thanks again.

David-Z's picture

Hey EricB-BSN,

 

If you truly are in a Standalone environment then you will not have a Symantec Endpoint Protection Manager installed to export a unmanaged client package from.

 

To update each client individually simply go to https://fileconnect.symantec.com and download 11.0.3001 CD1.zip. Once downloaded extract the files.

 

Inside the CD1 folder locate the SEP folder and either put it on a thumb drive and go to each workstation and launch the setup.exe inside to update each workstation or put the SEP folder on a network share and run the setup.exe from there.

 

As long as you are running Symantec Antivirus Corporate Edition 9.x or newer you can install right over the top. If you are running anything prior to that you will need to uninstall it first. If it is a fresh install then just run the setup.exe and follow through the prompts.

 

Hope that helps!

 

(If I am wrong about my assumptions of you not having a Symantec Endpoint Protection Management console and that you do not plan on having these clients be managed, then please clarify exactly what you are trying to accomplish for me.)

Message Edited by David-Z on 09-30-2008 11:47 AM

David Z.

Senior Principal Technical Support Engineer, Symantec Corporation

Enterprise Security, Mobility and Management

EricB-BSN's picture

David,

 

Thank you for what you wrote. You are correct, we are not using the manager because the environment we work with is completely standalone, there is no network that these laptops connect with.  We need to be able to put the update package onto a CD that includes a script so that the people in the field can update everything with the script.  Hope that makes sense.

 

Will what you told me update the firewall within Endpoint as well?

 

Thanks. 
Eric

EricB-BSN's picture

New virus definitions and new firewall definitions / polices.

 

CoveWolf's picture

Do these machines have any internet access at all?  If so just set the computers up to run live update.

EricB-BSN's picture

These laptops have absolutely no access to the internet at all which is why I am trying to figure out how to update them using a CD / script that we send to them.

 

 

CoveWolf's picture

If there is no internet or network access you don't need the firewall as far as I know but for the virus scan someone with more knowledge will have to help you.

EricB-BSN's picture

Does anyone know where I can go to download the unmanaged packages for Endpoint?  I have standalone machines that I need to update and cannot use LiveUpdate, therefore I need packages that I can run on the machines themselves that will update both the virus protection and the firewall.

 

Thank you in advance for your cooperation.


Eric

Sandeep Cheema's picture

See if this works for you.

 

Download the cd1 from fileconnect

Install SEPM(anywhere.)

Admin > Install Packages

Export a "Self Managed" client, You may additionally like to customize some of the options in "Client Install Settings"

Push the created package with "Migration and deployment" wizard to the clients.

Job done, Uninstall SEPM.

 

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting...

"Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

CoveWolf's picture

The unmanaged packages are for installing updates such as an Maintenance release or a maintenance patch.  If you are trying to update to a new MR or MP you do that by running the setup in the SEP folder on CD1.  You can download this from fileconnect using your company's account.  If you are referring to virus and firewall definitions those get released at least three times a day.  The normal procedure to do this is to connect the individual machine to the internet and run liveupdate.  When I put Symantec Virus Definition Download into google this is the page I got:

 

http://www.symantec.com/business/security_response/definitions/download/index.jsp

 

It seems you can get the definitions from there but it looks like you might have to pay extra.  Maybe a symantec employee can give you more detailed instructions.

 

 

EricB-BSN's picture

Thank you all for your replies.  Let me see I can explain this better.  We already have endpoint install on the latops.  These laptops have no access to a network or the internet, none at all, but we need to update the virus definitions and firewall definitions for them which we do via scripts on a CD that we send them.

 

What I need to know is if there is a specific file that I can download that will update these without live update or being connected to the internet?  The EXE that is on the site only seems to update the virus definitions.

 

Thank you.

Sandeep Cheema's picture

You dont have to pay anything for that but then those are just AV defs, Nothing else.

 

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting...

"Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

Sandeep Cheema's picture

No, There is no way to update the firewall defs without Liveupdate.

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting...

"Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

EricB-BSN's picture

Thank you Sandeep.  Is there anything that can used to update both the virus definitions and the firewall definitions within the Endpoint product?

 

 

EricB-BSN's picture

Is there anyway to point LiveUpdate to a directory structure on the PC itself as opposed to the interent?

 

 

CoveWolf's picture

Maybe I am wrong but if these computers have no internet access at all then you have no need for a firewall.  Updating the virus definitions to protect against virus introduction through media is all you would have to worry about. 

Sandeep Cheema's picture

Apart from what CoveWolf says, You have to have internet access somewhere(client or LUA or SEPM) to update the firewall through liveudpate, There is no workaround as well.

 

 

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting...

"Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

EricB-BSN's picture

Thank you both for your responses.  I agree Covewolf but unfortunately I don't have a say in what is installed on the laptops, we are told they need firewalls so they get it and since they get it we need to update it. 

 

Sort of disappointing that you have a product that can be standalone yet in order to update it fully you need some kind of internet connection.  That sort of defeats the purpose of it being standalone, doesn't it?

EricB-BSN's picture

Another question - is there anyway within the install of Endpoint to just install the antivirus piece?  Then we would just use Windows Firewall which should be satisfactory enough to do what it needs to do.

 

 

CoveWolf's picture

You will probably need to run the setup in the SEP folder again.  When you install Endpoint you need to do a custom install.  There you can select which components you need installed.   On my network we have hardware firewalls so we don't install the endpoint firewall at all.  Also when Symantec uses the word stand alone to describe their software they mean a computer that his not managed by a server not a computer that has not internet access. 

Message Edited by CoveWolf on 10-01-2008 06:20 AM

EricB-BSN's picture

Thank you Covewolf, I think that is what we are going to do.  Install it just for the antivirus, use the package updates that Symantec has on it's site and then use Windows Firewall which should work well enough for us.

 

Your help was very appreciated.

CoveWolf's picture

No problem.  I like helping others because when I was installing endpoint I had a ton of problems.  The only reason our endpoint installation is working so well is because of others on this message board.  Take it easy and good luck.