Endpoint Protection

I use Endpoint 11.. and I go to this site for program udpates. Can Symantec send an email or automaticaly update the program?

Live update does virus defintions, thats all correct?

http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce

I think this is only the definitions upgrades on this page you have provided the link for. Live update doesnt the virus definitions update, that's correct.

Are you using SEP only on one PC or in the corporate network? I dont think you would be willing to auto-upgrade the program keeping in mind how often and how nusty the bugs are introduced in upgrades.. We are just checking the File Connect page for new versions once per 3 months or like that. Then we test new version in the testing environment. Only then we push the upgrade to all our PCs.

The product is setup for SEPM to download product updates as well as virus definition updates via LiveUpdate. I know that we posted MR3 for download via LiveUpdate. I am not sure if we have posted MR4 yet for LiveUpdate download. I would watch File Connect for updates rather than waiting for them via LiveUpdate. You will see updates their much quicker than waiting on LiveUpdate.

Hi,

Please let us know if you were able to see updates from the liveupdate.

You can check if the product updates are configured or not, from the SEPM->Policies->Liveupdate Settings policy->Advanced page

Cheers,
Aniket

Why are those options greyed out if you configure "use default management server" only?

In the advanced settings page, all the options are grayed out because they need to access internet to be effective.SEPM will provide the virus definitions throught liveupdate, not the upgrade package.

So, if "Use a LiveUpdate server" option is unchecked you are forcing everyone to come to SEPM and cutting out their access to internet for liveupdate.

Cheers,
Aniket

JimBr just stated that "The product is setup for SEPM to download product updates as well as virus definition updates via LiveUpdate".

When I go to Admin/Server edit properties for the Local Site, Client updates are selected for the SEPM to download.  Where does the SEPM store the updates and what notifications can be set to alert me of client updates?

Hi,

The definitions in SEPM are stored in the following locations:

C:\program files\symantec\symantec endpoint protection manager\Inetpub\content\{C60DC234-65F9-4674-94AE-62158EFCA433}

C:\Program Files\Common Files\Symantec Shared\SymcData\

sesmipsdef32
sesmipsdef64
sesmvirdef32
sesmvirdef64


In the registry,the y are registered in the following locations HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps


SymcData-sesmipsdef32
SymcData-sesmipsdef64
SymcData-sesmvirdef32
SymcData-sesmvirdef64



HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmipsdef32
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmipsdef64
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmvirdef32
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmvirdef64

Hi Aniket, I appreciate the response, but I think you're missing my point. I'm specifically asking about "client updates" not definition updates.  See the screenshot below:

Hi,
When SEPM downloads new packages for clients, it is shown in SEPM GUI in Admin->install packages tab.

The new downloaded package will be saved in the location:
C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\ClientPackages

Thank you Anitket, that's exactly what I was looking for. 

Apparently this process is not working as the MR4 MP2 packages aren't there as I have not installed this version yet.  Now that I think about it, I don't know if this would be useful.  You would still have to download the CD's to upgrade the SEPM before deploying the new packages (according to the upgrade instructions of always upgrading the SEPM first before the clients) and by upgrading the SEPM, the new packages are installed anyway.