Endpoint Protection

Hi, we have questions about SEP11 clients installed on Windows 7 Enterprise O/S:

(1) How to confirm whether the SEP11 clients on the Windows 7 are getting the LiveUpdate signature from the SEPM Server and not from the Internet (Symantec LiveUpdate)?
(2) How to test whether the SEP11 Clients are working properly on Windows 7?

Our management want to test run the Windows 7 Enterprise with software applications before they rollout to the notebook computers and computer labs.

We have successfully installed SEP11 MR4 (version 11.0.4000.2295) on 2 computers with Windows 7 Enterprise O/S.
The SEP11 client is a managed client of our SEP Manager Server.  On the SEP Manager Server, both of the clients show a green dot.

The SEP11 client is only MR4.  The SEPM Server is also installed with MR4 MR0 (It is not SEP11 MR4 MP2, not MR4 MP1, and not MR4 MP1a).

Here is how we installed the SEP11 client on Windows 7 Enterprise: 
- First, run the file "LUSETUP.EXE" first.
- Then restart the computer. 
- Then run the file with "msi" extension  (run the "Symantec AntiVirus.msi" file to install).

Note:  Running the file "setup.exe" from the exported install package will not installed.

Thanks for your reply.

David
28 Aug 2009

1) How to confirm whether the SEP11 clients on the Windows 7 are getting the LiveUpdate signature from the SEPM Server and not from the Internet (Symantec LiveUpdate)?
configure the clients ( SEP clients on Win 7) to get the updates only from SEPM through LU policy. THis will ensure that systems get the update from SEPM. ( Disable the LU on clients for some time to verify this)


(2) How to test whether the SEP11 Clients are working properly on Windows 7?

If you want to test the AV feature, you can check eicar test to see AV functionality is active on that system.

Pete, 
Thanks your answers.

I have disable the LU on the clients on Windows 7 Enterprise.
- The LiveUpdate Button is shown as been disabled on the client.
- I will check the AV definitions again on Monday to see whether the clients are getting LiveUpdate from the SEPM Server.

The AV functionality is working:
- The AV is able to detect and has deleted the 2 test files - "eicar.com" and "eicar.com.txt".
- For the other 2 compressed files -  "eicar_com.zip" and "eicarcom2.zip" -  it did not delete them but created a log.

David

Better and easier where to check from where is the client taking the update

Also SEP MR4 and above can be installed on Windows 7 , but it is not supported. SEP MR5 will be realeased early next month , it will have full support for Windows 7 and 2008 R2

Pete, 
Thanks again. I have checked and verified that the SEP11 clients on the Windows 7 are getting the LiveUpdate from the SEPM Server.

Prachand,
Thanks for letting me know that the SEP MR5 will have full support for Windows 2008 R2.

We are using SEP11 MR4 on Windows 7 because our management wants to test the software applications on Windows 7 as early as possible (even before the MR5 is released), before they roll it out to the notebook computers and computer labs. We just want to prevent viruses and trojans during these testing period.

David

Do you have an actual release date planned for SEP MR5 yet? It would defintely be nice to be able to roll out Windows 7 to our IS Staff for testing knowing that the desktops have a fully functional and supported version of SEP running... 

We still dont have an actual date we can give to customers yet.