Updating contents through SEP manager

Created: 18 Nov 2012

Anishk

Hi,

We are using SEP 12.1... in our SEP manager, we have around 300 groups containg client machines. Is there a way to push content updates to all this group instead of pushing content updates indivdualy going into individual groups ?

Regards,

Anish

Filed Under

Tags:

Security, Endpoint Protection (AntiVirus) - 12.x, Endpoint Protection (AntiVirus), Tip/How to

Comments

pete_4u2002

Symantec Employee

Nov

2012

how are these client

how are these client connected to SEPM, i.e. Pull mode or Push mode?

clients request for content.

Cheers!
Pete

Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619

Anishk

Nov

2012

Hi, Content download takes

Hi,

Content download takes place through Pull mode.

Regrads,
Anish

Ambesh_444

Partner

Accredited

Nov

2012

Hi Anish, Yes you can

Hi Anish,

Yes you can update the group by pushing definition from SEPM.

Do rvert if it will work.

Regards,

Ambesh Sharma

Thank& Regards,

Ambesh

Please mark your thread as 'SOLVED' with the answer that helps you.

Anishk

Nov

2012

Hi, Actually we have 300 +

Hi,

Actually we have 300 + groups. And i wish to know whether we can update the contents instead of going to individual groups ? ie, a single push for all groups ...

Regrads,

Anish

John Santana

Nov

2012

What sort of content updates

What sort of content updates is this are we talking about ?

Kind regards,

John Santana
Graduate IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Anishk

Nov

2012

Hi, Updates from Symantec

Hi,

Updates from Symantec Server(Daily basis) to the client machines.

Regards,

Anish

John Santana

Nov

2012

Thanks for the response Anish

Thanks for the response Anish !

Kind regards,

John Santana
Graduate IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

pete_4u2002

Symantec Employee

Nov

2012

if the clients are

if the clients are communicating to SEP, clients will automatically take the content updates during heartbeat.

if you have pull mode, then push content through SEPm, client will still take update during heart beat

Cheers!
Pete

Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619

Anishk

Nov

2012

Hi, Yes, that is right. I

Hi,

Yes, that is right. I was just trying to do perform a manual content push to all the clients present in the 300 groups. But it is time consuming process goint to each group and pushing the updates..!!

Regards,

Anish

Beppe

Symantec Employee

Accredited

Nov

2012

Hi, for your information

Hi,

for your information "pushing the content from the SEPM to the clients" (even for a single group) is not a useful feature.

In any case (push or pull mode), once the clients are connected to the SEPM, they got the definitions automatically. So, if there is connectivity you don't need to push the content, if there is not connectivity, pushing the content does not work too, hence pushing to all or single groups is pratically useless.

Regards,

Giuseppe

Anishk

Nov

2012

In our case, we don't have

In our case, we don't have Liveupdate server. We are only having SEPM .
So, is it that we can't push content updates to the client machines ???

Regards,
Anish

pete_4u2002

Symantec Employee

Nov

2012

updates to clients cannot be

updates to clients cannot be expected if you push from SEPM when clients are communicating in Pull mode.

Cheers!
Pete

Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619

Anishk

Nov

2012

Hi, Thanks for the

Hi,

Thanks for the information Pete.

Regards,

Anish

Ambesh_444

Partner

Accredited

Nov

2012

Anish. Is it solve or...?

Anish.

Is it solve or...?

Thank& Regards,

Ambesh

Please mark your thread as 'SOLVED' with the answer that helps you.

Joel Bowden

Symantec Employee

Accredited

Nov

2012

I would be careful with

I would be careful with attempting to update the content of all clients at one time. This could cause a bandwith issue depending on how many total SEP clients there are. the clients will automatically update as they check in with the SEPM during there heartbeat interval.

"Evil Prospers When Good Men do Nothing"

Symantec Endpoint Protection Documentation

John Santana

Nov

2012

Joel, I thought that it would

Joel,

I thought that it would be randomized ?

Kind regards,

John Santana
Graduate IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

sandra.g

Symantec Employee

Certified

Nov

2012

Login on SEPM >Right click on

Login on SEPM >Right click on group >Then click on update content >Ok

FYI, this action causes the client computer to launch LiveUpdate and get updates from a LiveUpdate server, not from the SEPM. There is no way to force-push contents from the SEPM to the clients. Clients must always request it... yes, even in Push mode.

As Joel said above, just allow clients to get their updates via the heartbeat process. If you want them to get new content as soon as possible after it's available, then keep your clients in Push mode; the SEPM prompts them to check in and it is (or should be) randomized to not cause a bandwidth storm.

sandra

Symantec, Information Development, IMDP
Symantec Endpoint Protection / Core Security Engineering Group

Don't forget to mark your thread as 'solved' with the answer that best helped you!

John Santana

Nov

2012

Wow, I just know about this,

Wow, I just know about this, many thanks Sandra.

Kind regards,

John Santana
Graduate IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

John Santana

Nov

2012

So in this case if the Client

So in this case if the Client is not able to do the Live Update connection, then that "Update Content" is useless ?

Kind regards,

John Santana
Graduate IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

sandra.g

Symantec Employee

Certified

Nov

2012

It'll launch LiveUpdate but

It'll launch LiveUpdate but if it can't connect either to an external or internal LiveUpdate server, nothing will happen.

sandra

Symantec, Information Development, IMDP
Symantec Endpoint Protection / Core Security Engineering Group

Don't forget to mark your thread as 'solved' with the answer that best helped you!

Anishk

Nov

2012

Yes Santana, Why do we

Yes Santana,

Why do we still see that option in pull mode...!!!!! It seems confusing..

Regards,

Anish

Anishk

Nov

2012

Thanks for the information

Thanks for the information sandra. But it happens quite often that we see some computers are not updated while others are in the group and so comes a need to push content updates for that computer or the group as a whole.

Also, if we can't push content updates in pull mode, why then do we get that option(not greyed out)??

Regards,

Anish

sandra.g

Symantec Employee

Certified

Nov

2012

Also, if we can't push

Also, if we can't push content updates in pull mode, why then do we get that option(not greyed out)??

I am not sure what you mean by this. As I said before you can't ever truly 'push' content (e.g. virus definitions). To simplify:

Push mode prompts the clients to check in when there's new content, and on a schedule otherwise.
Pull mode allows clients to check in on a schedule only.
"Update content" sends a command to the client to run LiveUpdate, which has nothing to do with the SEPM sending content. This doesn't mean you don't have the option to do it.

If some clients in a group are updating while others are not, there could be other factors at play (connectivity; machine is down, etc). Just food for thought.

sandra

Symantec, Information Development, IMDP
Symantec Endpoint Protection / Core Security Engineering Group

Don't forget to mark your thread as 'solved' with the answer that best helped you!

Joel Bowden

Symantec Employee

Accredited

Nov

2012

John, yes you are right

John, yes you are right (thinking of something else). Basically what happens is when you execute the "Update Content" command it will queue it and the clients will get the command on their next heartbeat. So just letting the SEPM do it's job would make your job easier.

"Evil Prospers When Good Men do Nothing"

Symantec Endpoint Protection Documentation

John Santana

Nov

2012

Cool, thanks for the

Cool, thanks for the clarification Joel.

Kind regards,

John Santana
Graduate IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

SameerU

Partner

Accredited

Dec

2012

Hi Yes u can update Regards

Yes u can update

Regards