Endpoint Protection

 View Only
  • 1.  SEP installation verification.

    Posted Sep 27, 2009 11:51 PM
    Hi All,

    Need your comments of the follwoing scenerio of SEP installation.

    I am trying to upgrade our antivairus to SEP 11.
    I have SAVCE 10.2 currently running on Win2003 Server with 2GB RAM. Available hard disk space on C drive is less than 1GB; so, I installed SEP 11 on E drive. Installation completed without error but I dont think it is working. How do I check my installation is done correctly? Is there a checklist?

    I have the following issue as well:
    1. I am seeing continous log "An unexpected exception has occured [Site:Mysite] [Server: Myserver]". What can I do? Log detail does not help much.
    2. I notice that I have two servers on my site namely MyServer (Managment Server) and localhost (Database Server). Is there anything wrong with this?
    3. I tried to create client installation package and it does not complete; I have to stop it, but notice that system created the package. Tried to use the packageg to deploy client


    Your comment appreciated.


    Regards
    Wilson Rotop



  • 2.  RE: SEP installation verification.

    Posted Sep 28, 2009 12:04 AM
    If you are checking at the management server, then

    go to the clients tab and see if you have all the clients listed on which you installed the SEP client. They should have a green dot on them.

    Also, for the error "Unexpected error" you can check this document: http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/a7b03b05719fe791882573b0006d3e19?OpenDocument

    Best,
    Aniket


  • 3.  RE: SEP installation verification.

    Posted Sep 28, 2009 12:19 AM
    Hi,

    Please clarify, that you installed SEPM console in the Edrive or the SEP client? If you have insatlled  SEPM, you can go to start-All Programes, and verfiy that, you see , and are able to log into, Symantec Endpoint Protection Manager.


  • 4.  RE: SEP installation verification.

    Posted Sep 28, 2009 02:43 AM
    Hi All,

    During installation, I selected a folder in E drive; so, I am not sure what is installed on E drive and what is installed on C drive but I think all are in E drive. However, off course my system is in C drive and that drive is now running out of space. I am wondering if this could be a problem because SEP is not default system drive.

    I am able to login to SEPM Console and see all the fancy screens and that all to it. I am not really sure if the server is really working. Do I actually need to "deploy client to the server" before I can deploy client on my network? I have SAVCE on the same machine. If I do client deploy to the server than what happen to SAVCE Server? Can SAVCE and SEP co exist? 

    I tried to deploy client to a PC on the network and it installed the client SEP. But the PC is not reporting back. There is no green dot on the shield of the networked PC and it has no server name.

    As for the SPBBCSvc, it is started and no option to stop or restart. If I set to 'manual' then it may not start during server (machine) startup. Now, the question is "what is this service for?".

    Comments appreciated.

    Regards
    Wilson Rotop


  • 5.  RE: SEP installation verification.
    Best Answer

    Posted Sep 28, 2009 07:38 AM
    hi,

    I would recommend you to do a fresh Install, only if , yet you havent deployed the packages.

    You may like to go thru the Screenshots for Installation of SEP MR5 for your reference mentioned below. This Document has all the Screenshots that will help you install the product and upgrade your network from SAV to SEP.

    DISCLAIMER : This Document is created only for reference purpose. This document is not Symantec Tested or Published. I have created this  
                               document , with my recommendations and for reference only.

    Pre-requisites for Installing Symantec Endpoint Protection Manager (SEPM) for your Environment.

    1: 2GB of Ram for better performance and upto 4GB of free hard drive space.

        Note: It is recommended to install SEPM in the same drive where you have the

                 Operating system installed.Most commonly known as C drive. However, We can

                 Install SEPM in other drive’s too.

    2: Uninstall the Symantec System Center before installing the SEP client on the same

        Server.

    3: If you are connecting Remotely to the server, make sure that you are connecting using  

        the “ /console ” switch eg:  mstsc /console. Connect in a Session 0 mode.

    4: DO NOT install the SEPM on RADIUS server.

    5: Install (Internet Information  Services) IIS component from add/remove windows

        components.

    Link to System requirements for Symantec Endpoint Protection :


    System requirements for Symantec Endpoint Protection 11.0.2 and Symantec Network Access Control 11.0.2


    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007082112580548

    Link to Download the Symantec Endpoint Protection :

    https://fileconnect.symantec.com

    1: Select Language as English.

    2: Enter the Serial number. You can find the Serial number on the Symantec Express

        Certificate, it  with letter “M” eg: M123456789

    3: Select Http download.

    4: Click on the SEP MR5 International English

    5: Download only Symantec Endpoint Protection MR5 CD1.

    6: Save it onto the machine and then Right click on the downloaded Zipped folder for  

        Symantec Endpoint Protection and go to its properties.

    7: You would see Unblock button at the right bottom of that window. Click on it.

         Then Click Apply and OK.

     8: Now Extract the same folder by using the extract all option.

    Steps that needs to be focused while installing Symantec Endpoint Protection Manager (SEPM) for your Environment.

    1: Make sure you install the SEPM on Custom Website on port number 8014.

        If 8014 is already in use by some other application, you may feel free to change the

        Port number of your choice.

    2: Change the Server port 8443 to 8444, if you have BackupExec or any other Symantec

        Product running on the same server. As even BackupExec uses port 8443for its internal

        functionality.

    3: Let the Encryption password be Simple, avoid special characters.

    4: Use Embedded Database, if your network is not more than 5000 clients.

    5: Click No on the last window of installation that ask for migrating and deploying.

    1i.JPG

    2i.JPG

    3i.JPG

    4i.JPG

    5i.JPG

    6i.JPG

    7i.JPG

    8i.JPG

    9i.JPG

    10i.JPG

    11i.JPG

    12i.JPG

    13i.JPG

    14i.JPG

    15i.JPG

    16i.JPG

    17i.JPG

    Steps that needs to be focused after Login into the Symantec Endpoint Protection Manager (SEPM

    Step 1: Create a Group for your clients and remove inheritance for the policies.

                -Click on the Clients Tab on the Left mid corner.

                -Right click on My Company Group and click Add Group

                -Give the name to your Group and click OK

                -You will see your Group created as a Subgroup of My Company.

                  NOTE: All the Groups that we create are Sub groups of My Company Group.

                               We cannot rename or delete My Company and Default group, as they

                               Predefined groups.

                -Highlight your Group and then click on the policies tab in the Right Hand

                 window.

                -Uncheck the box that says “Inherit Policies and Settings from parent

                  Parent group “My Company”

    Step 2: Creating Packages.

                - Click on the Admin Tab to the left bottom corner of the window.

                - Then Click on Install Package Tab again at the left bottom corner of the window

    A)    Customizing recommended settings for the Client package

    -Click on Client Install Settings

     -Right click in the right hand window and click Add.

    -Now have the same settings as in the pic.

    18i.JPG

             

    -Click Ok once the Settings for the package are defined.

     

    B ) Creating and Exporting Package.

          -Click on the Client Install Packages

          -Highlight the package that you wish to create (32 or 64 bit)

          -Right click on the package and then Click Export.

    19i.JPG     

       -Browse to a location where the Package will be created and then click OK.

    Deploying the package.

    Step 1: Go to Start > All Programs > Symantec Endpoint Protection Manager > 

                 Migration and Deployment Wizard.

    Step 2: Click Next.

    Step 3: Select the first option that says Deploy the client.

                NOTE: Do Not select the Second option i.e. Migrate from earlier version of

                              Symantec Antivirus. Even if you have Symantec Antivirus Installed.

                              This option is mainly used in large networks.

    Step 4: Now Select the Second option “Select an Existing Package to deploy.”

    Step 5: Click Finish.

    Step 6: Browse to the location where package was saved.

    Step 7: Add the Computers.

                NOTE: If you get an Error message that says “NO NETWORK PROVIDER

                             FOUND THE GIVEN PATH” .

                            -Check the Windows Firewall.

                            -Check the Ping Status between the Server and the client.

                            -Check the Local Security policy on the client machine end.

                Else, please reply to this Email or give us a call back on our toll free number 

                (https://support.broadcom.com).