Endpoint Protection

SEPM Server does not have internet connection, so IPS defintion not getting updates on client pcs.
I want to know if i connect sepm server through internet and run the live update & it will download IPS definition.

client pc will update IPS definition through sepm server?

So you mean to say you will connect SEPM server to the internet for a short period of time so that it downloads liveupdate then again disconnect it from internet..
Well yes...once you connect sepm to internet and it downloads the updates it will distribute to all its clients..IPs definitions are not released daily ..it is sometime once a month or 2-3 times a month.

Once the SEPM has the IPS definitions, they will be distributed to the clients from SEPM.

If if your client machines do not have interne connection, then a good practice would be to connect the SEPM to internet for some time, get the definitions and distribute them from SEPM.

Cheers,
Aniket

You can connect your SEPM server to internet for downloading the updates. You also assure that in that package selection you selected IPS also. For this login to SEPM console

Go to Admin--->Servers--->local site--->edit site properties ,then go to live update tab. There in content types to download you can click on change selection option and ensure IPS is selected

Hi

Thanks, but i have another issue, due company security policy i can't connect  intranet pc to internet.
I have another sepm server for internet network and there IPS definition updated.
can i copy this definition from internet sepm server and put into intranet sepm server??

Copying definition from one sepm to another is not yet possible.However If you can install a LUA in that location it will serve your purpose.

I have to install LuAdmin in both network ?

No need to install LUA in both places..

 u can host Live update content using LUA in another server... check configuring distribution center section in the document. Its very easy...

LUA document is available in the second CD of SEP.
Or download from here ftp://ftp.symantec.com/public/english_us_canada/liveupdate/lua_2.1/LiveUpdate_Administrator_Users_Guide.pdf

just now i configured LuAdmin on internet pc... and downloading updates.

after that waht i have to do ? after downloading i have copy these updates to intranet sepm server??

In document i m not able to find out configuration for distribution.

How do I configure LiveUpdate Administrator (LUA) 2.1 server to obtain updates directly from another LUA 2.1 server?

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008082807141348


Also make sure you configure the Download and Distribution schedule.

Hi Vikram Thanks For the document.

Here two diffrent network . inetrnet luadmin server  cannot communicate with intranet sepm server and pcs.

Here no any communication between internet and intranet network. both are in diffrent subnet.

Follow this link to create a distribution center....

This  doc is for unc but u can set http also.


http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/31d992657aa601b2882574e100556c0a?OpenDocument

Well you can try one more thing

on the computer in which you have the LUA installed
go to the distribution URL in web browser.

https://luaservername:lua port ( 8080) /clu-prod

copy the whole clu-prody directory

then on the SEPM server in the IIS

paste the clu-prod directory in c:\inetpub folder

then Create a new website in IIS and configure on any port ( eg 8080 if anything else is not using it )
Point it towards the c:\interpub\clu-prod

then in the sepm configure to take updates from LUA
in the URL put
http:\\localhost:port of website\clu-prod

no need for username and password

Download this document and try to configure....
I have put screenshot of all the step to configure distribution center in LUA
 
http://www.4shared.com/file/128323659/5c93433a/dis.html
 

Thanks vikram & srinivas.

i will try this on monday and will update.

Hi Ajeet,

The document is available here
https://www-secure.symantec.com/connect/articles/configuring-distribution-center-lua