Endpoint Protection

Does Symantec still make virus def. for SAV 10 ?

I want to decomm SAV 10 but still have some Win 2000 servers with SAV 10 clients. Any advice?

I know SAV is EOL but you can still download defs from here (JDB file):

http://www.symantec.com/security_response/definitions/download/detail.jsp?gid=savce

End of Life announcement for Symantec AntiVirus Corporate Edition and Symantec Client Security

http://www.symantec.com/docs/TECH178551

You can install SEP 11.x on these machines, although 11.x has started the EOL process as well....

http://www.symantec.com/docs/TECH207274

In summary per Symantec:

Symantec AntiVirus 10.x Corporate Edition (SAV) will reach its scheduled End-of-Support-Life (EOSL) on July 4, 2012.  Virus definitions, maintenance updates, and technical support will no longer be available for this product. The recommended upgrade path is to replace SAV 10.x with Symantec Endpoint Protection 12.1 (SEP 12.1).

Info on each release here as well:

http://www.symantec.com/business/support/index?page=releasedetails&key=51852#

Correction!! Its Winsows NT so I cant upgrade to SEP11

Correct. If NT, you cannot go to SEP. Time to replace those machines :)

Maybe I can configure client on Win NT machine to automatically get virus updates fro the web?

If it's not a managed client, you should be able to adjust the liveupdate settings.

You could also script it:

https://www-secure.symantec.com/connect/forums/how-download-update-symantec-ftp-site

Client is being managed. Is there a way to stop it and make it go out to symantec for updates?

I assume you no longer have the SAV management console?

Hi artk1,

I definitely recommend updating those machines to a newer OS and security product.  SAV has traditional AV protection alone.  SEP 12.1 with its IPS, SONAR, Insight and other components blocks about twice as much malicious files and network activity.

Hope this helps! 

Mick
 

I do have the SAV 10 console and the issue is that I cant replace Win NT machines. That's my issue I want to decomm SAV 10 console but still need protection on NT machines.

Symantec Critical System Protection is the product that I recommend- the only currently-supported product that works on Windows NT.

See also, for more details:

Symantec™ Critical System Protection Version 5.2 RU9 MP3 Platform and Feature Matrix
http://www.symantec.com/docs/DOC6664 
 

Do I need a console to manage Symantec Critical System Protection   or is it installed right on the server itself. Also is it possible to configure SAV10 client that's on the server to stop being managed and connect to the Internet for updates?

CSP requires a console, it's a separate product.

I believe you can make them unmanaged by replacing the grc.dat file. It's been so long since I've used sav though I'll see if I can find a doc on it.

That would be great. If I can have sav client get updates without the console. Thanks