Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Updating SAV for Linux from SEPM and not LUA

Created: 11 Dec 2012 | 10 comments

Is it possible to update SAV for Linux clients from a SEPM rather than giving the SAV clients access to the LUA that is sat in a DMZ? I need a way to get the SAV updates from the LUA to the SEPM and then provision them for SAV to download without provisioning an innternal LUA?

Tim

Comments 10 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

SEPM does not provide updates to Linux machine. It can provide updates to managed SEP windows clients.

Linux clients can get the updates from Internal Liveupdate administrator or Symantec Live Update.

A Quick look at this Thread:

https://www-secure.symantec.com/connect/forums/sav-linux-integration-endpoint-protection-manager-121

SAV for Linux (SAVFL) ships with SEP, but cannot be fully managed by the SEPM. 

Here are three proposed enhancement requests that followers of this thread may wish to support:

Managed SEP client for Linux
https://www-secure.symantec.com/connect/ideas/managed-sep-client-linux

Remote Deployment Tool for SAVFL
https://www-secure.symantec.com/connect/ideas/remote-deployment-tool-savfl

Update Configuration Editor (ConfigEd) Tool for SAVFL
https://www-secure.symantec.com/connect/ideas/update-configuration-editor-configed-tool-savfl

Also, here is an article that can help:

SAV for Linux Scanning Best Practices: A (Somewhat) Illustrated Guide
https://www-secure.symantec.com/connect/articles/sav-linux-scanning-best-practices-somewhat-illustrated-guide

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

pete_4u2002's picture

How would I configure Symantec Antivirus for Linux (SAVFL) to download definitions from the Distribution Center (DC) of an internal LiveUpdate Administrator (LUA) 2.x server?

http://www.symantec.com/business/support/index?pag...

TChappers's picture

Mithun,

It doesn't really help no. You have stated exactly what I already knew about the SEPM and put in the question. I need to avoid punching holes into the DMZ for these clients and need to provision them from inside the network without deploying another LUA, there must be a way of doing this?

Tim

Mick2009's picture

Hi Tim,

Have you considered setting up a LUA Distribution center (DC) on your SEPM machine?  In brief, the LUA server can download the materials once and then copy them off to up to 100 locations ("Distribution Centers") around your internal network.

The SAVFL machines can contact that SEPM's IP address and retrieve the necessary definition updates from there over HTTP or FTP, for instance.   Or, if there's a different, better server on the interenal network that all the SAVFL clients can reach, set that up as a DC. 

Please update the thread if you need any additional info on how to set this up!  &: )

With thanks and best regards,

Mick

TChappers's picture

Pete,

That sounds perfect, what do I need to do?

Tim

pete_4u2002's picture

as stated above the SEPM will not provide updates, its only through internal LUA or symantec LUA. As Mick2009 suggested use Distribution centre on SEPM box. The link I pasted should help. Let know if there are any questions

http://www.symantec.com/business/support/index?page=content&id=TECH93505

TChappers's picture

Pete, Mick,

The links tells me how to configure the Linux clients to use a Distribution Centre but not how to make the SEPM a distribution center, how do I achieve this?

Tim

Mick2009's picture

Hi Tim,

The exact answer depends on what OS the SEPM machine is running on.  If your SEPM is on a Win2008 R2 machine, this KB should offer the instructions:

How to configure a Windows Server 2008 as a Distribution Center for LiveUpdate Administrator 2.x content
Article:TECH132545   |  Created: 2010-01-18   |  Updated: 2011-12-07   | 
Article URL http://www.symantec.com/docs/TECH132545 
 

With thanks and best regards,

Mick

Mick2009's picture

Hi Tim,

Just a ping to check if you managed to get this working correctly.  The thread is still marked "needs solution."

With best regards,

With thanks and best regards,

Mick