Endpoint Protection

Hey all,

Just playing around with SEPM v14 - very impressive so far!

Question: I installed the Standard client which means it's getting the defs from the 'Cloud'. But how do you know if it's actually grabbing the defs from the Cloud? Does it make any mention of it in the SEP client logs?

All I am seeing is this under View Logs -> Client Management -> View Logs -> System Log

"Downloaded new content update from the management server successfully" with the remote file path as my local server. No mention of the clouds defs.

Am I looking at the wrong place? If so, where should I look at? :)

Thanks all!

Tony

Under Help >> Troubleshooting >> Versions, it will show the latest installed. SymDiag should also show this info. That's the closest I've found.

With 14, my C:\ProgramData\Symantec\Symantec Endpoint Protection\14.0.2332.0100.105\Data\Definitions\VirusDefs folder is now empty.

Hi Tony,

You may have installed the standard version of SEP but the policies from the respective grp. is also attached to it , which is in this case live update policy

If you want to get the updates from internet cloud only see if you have configured the live update policy like below

You can then check the same SEP log showing - Downloaded new content update from Symantec live update server successfully

Thanks. I've looked at the VirusDefs folder and it is indeed empty. I can see the client is reporting back with the latest defs versions. So, I guess it's working.

Just that it would be nice to see the confirmation from the logs, you know! ;)

Hi Tony,

I recommend just ensuring that the SEP clients have reliable connectivity to Symantec's online Reputation servers and other resources.  If the SEP client is communicating with those, it can get what it needs from the cloud as necessary.

How to test connectivity with Insight and Symantec Licensing servers
http://www.symantec.com/docs/TECH163042

Thanks. I have tested these URLs and all of them works fine. So, I assume as long as these URLs are accessible, then it 'works' on the client side?

Just wanted to see some reassurement if they showed up in the logs to keep the managers happy, if you know what I am saying. ;-)