Endpoint Protection

Hello,

Have SEP 11.0.6200.754 server which Pushes definitions to all our workstations.  If a person travels and doesn't connect to the SEP server what is the best practice to handle updating definitions?

Should the workstation automatically update/pull from Symantec after x amount of days not connected to the SEP server?  If so, how to configure?  Would like to have this automated vs. having users trying to remember to update the definitions while traveling and not connecting to our network for periods of time.

Thank you!

You can configure SEP client to take update from the internet when no connected to SEPM.

This can be done from the Liveupdate Policy on the SEPM.

In the LU policy under Internal or External LiveUpdate Server  select Use an alternate LiveUpdate server
 and then update the policy

How to configure mobile computers to automatically download virus definitions when disconnected from the Symantec Endpoint Protection Management console

Hello,

In case, if there are mobile computers which are remain out of office for a x amount of period, you can create a different polciy for those machines.

First, make sure you create a Different groups for such specific machines.

You as an administrator can provide either the user to have Full Powers to Launch the Liveupdate via "LiveUpdate" Button. This would require the user to be connected to Internet to update the SEP with Latest definitions. Once, the user Clicks on the "LiveUpdate" Button, SEP would be able to Symantec LiveUpdate Server and download the Latest definitions.

How to configure a LiveUpdate Policy to only Use a LiveUpdate server:

1. Click Policies in the left navigation bar.
2. Select LiveUpdate.
3. Under "Tasks" click Add a LiveUpdate Settings Policy.
4. Enter a <Policy Name> <policy name=""></policy>, and then select Server Settings.
5. Uncheck the Use the default management server (recommended) option and place a check by the Use a LiveUpdate Serveroption.
6. Select Schedule in the left navigation bar and place a check in the box to select the Enable LiveUpdate Scheduling option.
7. Designate the Frequency for clients to run LiveUpdate. (daily is recommended)
8. Click OK
9. When asked if you would like to assign this policy, click Yes to assign the policy.
10. Select the group and/ or location to which you want this policy applied.
11. Click Assign.
12. When asked if you would like to assign the policy changes, click Yes to assign the policy.

OR 

You as an administrator can provide either the user with no powers and Configure "Locations" and the criteria for "Location switching" within the applicable "Group" in the Symantec Endpoint Protection Manager

1. Click Clients in the left navigation bar, select Policies.
2. Under "View Clients" select the group which includes your mobile computers.
3. Under Tasks, click the Manage Location option to launch the Manage Locations dialog box.
4. Near the bottom of the "Locations" section, click Add.
5. Enter a Name for your location, a Description (if desired), and click OK.
6. Ensure that the "Enable this location" option is checked.
7. At the "Switch to this location when:" section, click Add.
8. In the "Specify Location Criteria" window, select a criteria type in the drop down menu.
9. To specify the conditions of the selected criteria, click Add and type the condition you wish to use.
10. Click Ok.
11. Adjust the location check interval (if desired).
12. Check the Enable location change notification box, if you wish a notification message to be displayed when the criteria for location change has been met.
13. Click OK to complete the process. Your new Location appears under the Policies tab.

1. In the "Location-specific Policies" section for your new location, click the Tasks link for the "LiveUpdate Settings Policy", and then click Replace Policy.
2. Select the desired new policy from the drop down menu.
3. Click OK to complete the process. Your new policy appears under "Location-specific Policies."

I setup a SERVER group and a WORKSTATION group.

For My Company root level set the Communication Settings to PUSH download policies and content from Management server.

Live Update Server Settings set to Use the Default management server.  Where is the setting to have the Managment server communicate to the Symantec Live Update server to get its definitions?

SERVERS group inherits My Company settings.

WORKSTATIONS is not inherited and created a Workstations policy to Use the Live Update Server daily instead of the Default management server.

Thanks for the info, really helped!

http://www.symantec.com/business/support/index?page=content&id=TECH103706

from SEPM>ADMIN>SERVER>LIVEUPDATE> "LiveUpdate Source servers"