Video Screencast Help

Where is DLP Agent Installation Media?

Created: 25 Mar 2013 • Updated: 26 Mar 2013 | 7 comments
This issue has been solved. See solution.

I have just installed an Endpoint server.  No policies have been configured yet.

Can the agents be deployed to endpoint computers with no polices configured just to get the software out to them and then configure policies later?

I only see the detection server installation software in our downloads.

The Admin Guide says:

Installing the Symantec Management Agent
You must install the Symantec Management Agent before you install the Symantec
DLP Agent. The Symantec Management Agent and the Symantec DLP Agent run
concurrently on your endpoint computers. The Symantec Management Agent lets
you deploy the Symantec DLP Agent. It also lets you use a number of
troubleshooting agent tasks.
Implementing Symantec DLP Agents 1355
About the Symantec Management Console
Note: In Symantec Data Loss Prevention v11.x, SMP v7.0 and SMP v7.1 are
Installing the Symantec Management Agent
1 From the DLP Portal page click the Install Symantec Management Agent
2 Click the SelectComputers option and select the specific endpoint computers
where you want the Symantec Management Agent installed.
3 Click the Install Symantec Management Agent option.
4 Click Proceed with Install. The installation starts immediately.
Note: If you want to set the installation on a schedule, click Installation
Settings and modify the settings in the pop-up window.
After you have installed the Symantec Management Agent, you can install the
Symantec DLP Agent
I don't know what that is referring to.  I have never heard of "DLP Portal page."  We downloaded the other software from Fileconnect.
So it sounds like we need to install 2 agents (management agent and then DLP agent).  Where are the installation files?
Operating Systems:

Comments 7 CommentsJump to latest comment

pete_4u2002's picture

you should be seeing the following filename 'Symantec_DLP_11.X_Agent_Win-IN' on fileconnect. Download the file for Windows installer, similarly there will be one for linux installer.

NetUser's picture

I just found the 11.6.2 agent on Fileconnect.  It is labeled as "inline update."  

Is this a full installer or do you have to install an older version and then install this to update it? 11.6.2 Windows Inline Update 61,626.31

Do you have to configure policies before installing the agents or can the agents be deployed in advance and  then start creating policies later?

pete_4u2002's picture

this will be full package. Once installed and pointed/communicated to detection/prevention server the policies will be taken by the agent.
Basically this is the sequence to install, enforce server followed by detection/prevention server and then agents.

Policies will be configured on enforce server and will be assigned to detection/prevention server.

NetUser's picture

Yes, I have already installed Enforce server and an Endpoint detection server.  However, I have not configured anything on the Endpoint server.  It has a solution pack with no modifications to the defaults.

Can the agents be deployed without configuring the Endpoint server and enable policies later?

I'm also wondering about this text in the Admin Guide:

You must install the Symantec Management Agent before you install the Symantec
DLP Agent. The Symantec Management Agent and the Symantec DLP Agent run
concurrently on your endpoint computers.

Is this Symantec Management agent necessary for everyone or only for those using SMC instead othe Enforce console for management?

pete_4u2002's picture

you can install endpoint without giving the detection server, however it will be double work as you first install then again make the agent to communicate to detection server.

if you are using Symantec Management to install client then it is needed.

NetUser's picture

I didn't mean not giving it the detection server.

I want to distribute the agents and get them communicating with the server immediately, but not have any polices enabled. I would enable policies later. 

Is there a way to do that?

pete_4u2002's picture

you can, create a policy group and do not apply the policy group to any server. Include all the policy to this policy group. In this way you do not have policy applied.