Endpoint Protection

 View Only

  • 1.  Installing Endprotection on 2 sites connected through VPN

    Posted Apr 11, 2012 01:39 PM

    Hello everyone,

    we have a customer that has two sites.On site A we have installed Symantec Endpoint protection 12.1 (express) and we would like to do the same on the onsite manager installed in the second site (B). What we would like to do is to make sure that users can download the virus definitions from the server in their respective sites instead of flooding the VPN to get updates from the server installed in site A. My questions are:

    a) is it possible to do it with the version we have?

    b) how do we verify if the license we have allows us to do so?

     

    Thanks a lot for your help



  • 2.  RE: Installing Endprotection on 2 sites connected through VPN

    Trusted Advisor
    Posted Apr 11, 2012 02:51 PM

    Hello,

    While such a method of deployment is feasible, it is not recommended due to the risk of packet loss, which can result in an incorrect installation. The recommended method is to download the SETUP.EXE program directly to the computer and then proceed with the installation locally.

    Reference: http://www.symantec.com/docs/TECH102211

    Secondly, I would recommend you to check this Article: http://www.symantec.com/docs/TECH93033

     
    Again, Use a GUP at each location, of 1 for a few locations based on the resources.
     
    Best Practices with Symantec Endpoint Protection (SEP) Group Update Providers (GUP)
     
     
    Group Update Provider(GUP): Sizing and Scaling Guidelines
     
     
    Tips For Installing SEP In A Low Bandwidth Environment
     
     
    How To Optimize Endpoint Protection for Branch Offices using GUPs, Load Balancing, and Location Awareness
     

     

    Hope that helps answering your queries!!



  • 3.  RE: Installing Endprotection on 2 sites connected through VPN

    Broadcom Employee
    Posted Apr 12, 2012 05:10 AM

    Hi Max1gk,

    I would like to answer your questions

    a) is it possible to do it with the version we have?

    --> It's possible with SEP 11.x & SEP 12.1 also

    Now you have an option to choose

    1) Configure GUP at Site B, 

    Best Practices with Symantec Endpoint Protection (SEP) Group Update Providers (GUP)

    http://www.symantec.com/business/support/index?page=content&id=TECH93813

    Video’s created on Group Update Provider on the Symantec Connect website.

    https://www-secure.symantec.com/connect/videos/group-update-providers-part-1

    https://www-secure.symantec.com/connect/videos/group-update-providers-part-2

    or

    2) Configure proper MSL for both the SEPM's

    About failover and load balancing

    http://www.symantec.com/business/support/index?page=content&id=HOWTO26809

    Installing a management server for failover or load balancing

    http://www.symantec.com/business/support/index?page=content&id=HOWTO26807

    b) how do we verify if the license we have allows us to do so?

    ---> Maintaining your product licenses

    http://www.symantec.com/docs/HOWTO55300

    Can a single license be split between multiple separate Symantec Endpoint Protection Managers?

    http://www.symantec.com/docs/TECH164392

    How to engage Symantec Licensing for help with product licensing issues

    http://www.symantec.com/docs/TECH113612

    Licensing enforcement rules

    http://www.symantec.com/docs/HOWTO55135

    Check this article for more details

    https://www-secure.symantec.com/connect/articles/sep-121-and-license-concept

    I hope it will help you !!!