Michigan Security User Group

 View Only

How do I create and configure a custom Symantec Endpoint Protection installation package in version 12.1? 

Jul 28, 2011 01:31 PM

To create a new custom client installation configuration

  1. Open the Symantec Endpoint Protection Manager console.
  2. On the Admin Tab, under Tasks, click Install Packages.
    The current default client installation packages appear on the right.
  3. Under Install Packages, click Client Install Settings.
  4. Under Tasks, click Add Client Install Settings.
  5. Specify the name you would like the custom Client Install Settings to have.
  6. Give the custom Client Install Settings a description.
  7. Select an installation type from the following:
    • Show progress bar only (Displays notification, but requires no user input)
    • Interactive (User input required)
    • Silent (No user input or display)
  8. Select the installation location (default or custom folder). 
  9. Enable or disable installation logging.
  10. Submit reputation information to Symantec Security Response. 
  11. Select whether or not to add the program to the Start Menu.
  12. Select whether or not to maintain all previous logs, policies, and client-server communication settings
  13. Viewing the 'Schedule Reboot' tab, consider whether to force or schedule a reboot.
  14. Click OK.

 

To know more about :

Restarting client computers : http://www.symantec.com/docs/HOWTO55111

 

 

 

To create a new custom Install Feature Set

  1. Open the Symantec Endpoint Protection Manager console.
  2. On the Admin tab, under Tasks, click Install Packages.
    The current default client installation packages appear on the right.
  3. Under Install Packages, click Client Install Feature Set.
  4. Under Tasks, click Add Client Install Feature Set.
  5. Specify the name you would like the custom Client Install Feature Set to have.
  6. Give the custom Client Install Feature Set a description.
  7. Select the Feature Set version 11.x or 12.1.x 
  8. Select the Symantec Endpoint Protection features you want to include in the install package from the following list:
    • Virus, Spyware and Basic Download Protection
      • Advanced Download Protection
      • Microsoft Outlook Scanner
      • Lotus Notes Scanner
      • POP3/SMTP Scanner
    • Proactive Threat Protection
      • SONAR Protection
      • Application and Device Control
    • Network Threat Protection
      • Firewall
      • Intrusion Protection
  9. When you are finished, click OK.

 

To know more about :

The Default Client Install Feature Set: http://www.symantec.com/docs/HOWTO55062

 

To create the new custom install package

  1. In the Symantec Endpoint Protection Manager console, on the Admin tab, under Tasks, click Install Packages.
    The current default client installation packages appear on the right.
  2. Under  Install Packages, click Client Install Packages.
  3. Under Tasks, click Export Client Install Package.
  4. Browse to or create a preferred export folder, and select it.
  5. Select whether or not you want to create a single .EXE file. Unchecking single .EXE will export mutiple files, including an *.MSI installer file.
  6. Under "Pick the customized installation settings below", from the drop down menu, select your custom Client Install Setting.
  7. Under "Select the features you want to use", from the drop down menu, select your custom Client Install Feature Set.
  8. Choose "Export a managed client", then select the group to which the client will be installed. If no group has been created, select the Default Group. It is recommended to leave "Add clients automatically to the selected group" checked.
  9. Select the Preferred Policy Mode. The default is Computer mode.
  10. Click OK.


The new install package is created in the location you specified.

 

See About the types of threat protection that Symantec Endpoint Protection provides.

See Configuring client installation package features.

After installation, you can enable or disable the protection technologies in the security policies.

See About enabling and disabling protection.

See Performing tasks that are common to all security policies.

Statistics
0 Favorited
3 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Comments

Jun 04, 2013 03:33 AM

Nice One 

Regrads

Ajin

Feb 26, 2013 10:37 AM

Cool, thanks !

Feb 26, 2013 10:32 AM

Yes, from SEPM or GUP or LiveUpdate- whatever is configured.

Feb 26, 2013 10:25 AM

So yes, after it contacted the SEPM server, then it can update itslef right ?

Feb 26, 2013 05:58 AM

Hi humtake,

In the SEP 12.1 SEPM, it is possible to export a client either with the latest definitiions in place (a larger package) or a smaller one that will need to run LU to update assoon as it is installed.  The "All content (recommended)" will create a package with all the defs. 

 

How to export Symantec Endpoint Protection (SEP) client install packages without any definitions or package with Basic Content.
http://www.symantec.com/docs/TECH178698 
 

Feb 21, 2013 01:47 PM

Are there any instructions on how to create an install package that includes all up-to-date signatures and updates?  Every time we deploy a package it saturates the network for a good 20 minutes while it pulls down all of the updates.  It would be easier if we can just include them in the package.  I was told that SEP 12.1 has an easy way to do this.  In SEP 11, it was a pain and not worth the time.  Please let me know if there is a way.  Thank you.

Feb 16, 2013 02:02 AM

Thank you!

Feb 15, 2013 08:25 PM

Thanks for sharing this information Mithun !

Jan 30, 2013 01:06 PM

Cool explanation! yes

Mar 26, 2012 05:20 AM

Hello,

Yes, In SEP 12.1, Application and Device Control is not a Part of Firewall.

In other words, In SEP 12.1, you can Install Application and Device Control Individually.

Note: Application and Device Control Policies do not work on 64-bit client computers running 11.x. They will work on 64-bit clients running 12.1.

Hope that helps!!

Mar 25, 2012 07:35 PM

If I do not want to use all the features, such as, Firewall as I use Windows firewall and no plan to switch over to Symantec firewall yet, but I do want to use Application and Device Control, in SEP 11, I have to install firewall as it is required for Application and Device Control, Are there any changes in SEP 12.1 on this setting? or I still need to install Firewall if I wish to use Application and device control in SEP 12.1.

Dec 15, 2011 12:37 PM

Gr8

Nov 18, 2011 10:31 AM

Excellent article and very helpful!  Thank you!

Sep 12, 2011 02:52 PM

Thank you

This is perfect.

Related Entries and Links

No Related Resource entered.