Endpoint Protection

Hi,

We are using SEP 12.1... in our SEP manager, we have around 300 groups containg client machines. Is there a way to push content updates to all this group instead of pushing content updates indivdualy going into individual groups ?

Regards,

Anish

how are these client connected to SEPM, i.e. Pull mode or Push mode?

clients request for content.

Hi Anish,

Yes you can update the group by pushing definition from SEPM.

Login on SEPM >Right click on group >Then click on update content >Ok

Do rvert if it will work.

Regards,

Ambesh Sharma

What sort of content updates is this are we talking about ?

Hi,

Actually we have 300 + groups. And i wish to know whether we can update the contents instead of going to individual groups ? ie, a single push for all groups ...

Regrads,

Anish

Hi,

Content download takes place through Pull mode.

Regrads,
Anish

Hi,

Updates from Symantec Server(Daily basis) to the client machines.

Regards,

Anish

Thanks for the response Anish !

if the clients are communicating to SEP, clients will automatically take the content updates during heartbeat.

if you have pull mode, then push content through SEPm, client will still take update during heart beat

Hi,

Yes, that is right. I was just trying to do perform a manual content push to all the clients present in the 300 groups. But it is time consuming process goint to each group and pushing the updates..!!

Regards,

Anish

updates to clients cannot be expected if you push from SEPM when clients are communicating in Pull mode.

Hi,

for your information "pushing the content from the SEPM to the clients" (even for a single group) is not a useful feature.

In any case (push or pull mode), once the clients are connected to the SEPM, they got the definitions automatically. So, if there is connectivity you don't need to push the content, if there is not connectivity, pushing the content does not work too, hence pushing to all or single groups is pratically useless.

Hi,

Thanks for the information Pete.

Regards,

Anish

Anish.

Is it solve or...?

I would be careful with attempting to update the content of all clients at one time.  This could cause a bandwith issue depending on how many total SEP clients there are.  the clients will automatically update as they check in with the SEPM during there heartbeat interval. 

Joel,

I thought that it would be randomized ?

Login on SEPM >Right click on group >Then click on update content >Ok

FYI, this action causes the client computer to launch LiveUpdate and get updates from a LiveUpdate server, not from the SEPM. There is no way to force-push contents from the SEPM to the clients. Clients must always request it... yes, even in Push mode.

As Joel said above, just allow clients to get their updates via the heartbeat process. If you want them to get new content as soon as possible after it's available, then keep your clients in Push mode; the SEPM prompts them to check in and it is (or should be) randomized to not cause a bandwidth storm.

sandra

John, yes you are right (thinking of something else).  Basically what happens is when you execute the "Update Content" command it will queue it and the clients will get the command on their next heartbeat.  So just letting the SEPM do it's job would make your job easier.

Wow, I just know about this, many thanks Sandra.

Cool, thanks for the clarification Joel.

So in this case if the Client is not able to do the Live Update connection, then that "Update Content" is useless ?

It'll launch LiveUpdate but if it can't connect either to an external or internal LiveUpdate server, nothing will happen.

sandra

Thanks for the information sandra. But it happens quite often that we see some computers are not updated while others are in the group and so comes a need to push content updates for that computer or the group as a whole.

Also, if we can't push content updates in pull mode, why then do we get that option(not greyed out)??

Regards,

Anish

Yes Santana,

Why do we still see that option in pull mode...!!!!! It seems confusing..

Regards,

Anish

In our case, we don't have Liveupdate server. We are only having SEPM .
So, is it that we can't push content updates to the client machines ???

Regards,
Anish

Also, if we can't push content updates in pull mode, why then do we get that option(not greyed out)??

I am not sure what you mean by this. As I said before you can't ever truly 'push' content (e.g. virus definitions). To simplify:

• Push mode prompts the clients to check in when there's new content, and on a schedule otherwise.
• Pull mode allows clients to check in on a schedule only.
• "Update content" sends a command to the client to run LiveUpdate, which has nothing to do with the SEPM sending content. This doesn't mean you don't have the option to do it.

If some clients in a group are updating while others are not, there could be other factors at play (connectivity; machine is down, etc). Just food for thought.

sandra

Hi

Yes u can update

Regards