Endpoint Protection Small Business Edition

 View Only
  • 1.  what will happen if the endpoint protection manager dies?

    Posted Jan 03, 2012 09:46 AM

    What will happen if the endpoint protection manager goes down? Will other PCs still get the latest definitions?



  • 2.  RE: what will happen if the endpoint protection manager dies?

    Broadcom Employee
    Posted Jan 03, 2012 09:54 AM

    It depends on the configuration. The default one is that PC get the updates from the Symantec Endpoint Protection Manager (SEPM).

    The Best Practice is to make the regular backups of the database and additionally to have the backups of other important data.

    Please review Disaster Recovery procedure to check what needs to be stored to be able to recover evertyhing after the failuer of the SEPM:

    Symantec Endpoint Protection 12.1: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

    http://www.symantec.com/business/support/index?page=content&id=TECH160736



  • 3.  RE: what will happen if the endpoint protection manager dies?

    Posted Jan 03, 2012 10:40 AM

    If the clients usually get their definitions from SEPM, you can configure a new location to allow them to retrieve their content from the internet while their SEPM is down:

    How to Use Location Awareness as Fault Tolerance for Content Updates

    http://www.symantec.com/docs/TECH94265



  • 4.  RE: what will happen if the endpoint protection manager dies?

    Trusted Advisor
    Posted Jan 03, 2012 11:20 AM

    Hello,

    Yes. There is nothing to worry if Internet is accessble.

    Just make sure you do a small change.

    Change the Liveupdate Policy to update itself automatically every 4 hours. In addition to this, you can also provide Access to users to use the Liveupdate Button. So that the machines, can grab the definitions from the Internet.

    Hope that helps!!



  • 5.  RE: what will happen if the endpoint protection manager dies?

    Posted Jan 04, 2012 09:44 AM

    how can I enable/disable the liveupdate button?



  • 6.  RE: what will happen if the endpoint protection manager dies?

    Trusted Advisor
    Posted Jan 04, 2012 12:15 PM

    Hello,

    Make the following change to the LiveUpdate policy:

    Policies > LiveUpdate > LiveUpdate Settings policy > Edit the policy

    By default, "Use the default management server (recommended)" is checked. 
    You will find under the Advanced Settings, "Allow the user to manually launch LiveUpdate", is grayed out. 
    To enable this checkbox, go back to Server Settings: Check the box for "Use a LiveUpdate server", leaving the following checked: 
    "Use the default Symantec LiveUpdate server", as this setting will enable users to run LiveUpdate manually via the Internet.

    "Use a specified internal LiveUpdate server" would only need to be chosen if you wish your users to manually download updates via the LiveUpdate button from your own LiveUpdate server, rather than from Symantec LiveUpdate servers.

    Save and apply the policy to the relevant groups. The LiveUpdate button will now be active on SEP clients. Hence, users are now able to run LiveUpdate manually.

    Hope that helps!!