Endpoint Protection

 View Only
Expand all | Collapse all

SEPM client only configuration

Migration User

Migration UserJun 08, 2017 01:24 PM

ℬrίαη

ℬrίαηJun 08, 2017 01:37 PM

ℬrίαη

ℬrίαηJun 08, 2017 03:24 PM

Migration User

Migration UserJun 08, 2017 03:37 PM

ℬrίαη

ℬrίαηJun 08, 2017 04:05 PM

  • 1.  SEPM client only configuration

    Posted Jun 08, 2017 11:21 AM

    Hello,

     

    I am just new to Symantec, and wanted to check a few items.

    We have a workgroup composed of around 25 PCs. We do plan to migrate to a domain but that will happen later on. the workgroup will not have access to the internet so we intend to update the virus signatures manually. My question is can i configure SEMP without any server? I mean all 25 PCs are clients? What do i need to do if I do it that way? Is that even possible?

     

    Thanks

     



  • 2.  RE: SEPM client only configuration

    Posted Jun 08, 2017 11:25 AM

    A SEPM manages the clients (managed), is this what you want or do you the clients standalone (unmanaged)?

    SEPM can only be installed on a server OS. Earlier versions of SEPM allowed the abiltiy to install on Windows 7, 12.1 version should still support this. SEPM 14 does not.



  • 3.  RE: SEPM client only configuration

    Posted Jun 08, 2017 12:34 PM

    we will have the clients as stand alone, unmanaged if thats the term.

    If they are all stand alone, what do i need to install on each client? is there any configuration that i need to do for each client? and since i dnt hve the SEPM should i download the .jdb files or the .exe to update the signatures?

     

    Thanks



  • 4.  RE: SEPM client only configuration

    Posted Jun 08, 2017 01:00 PM

    To get them managed, you need to stand up a SEPM and replace the sylink file on each one.

    To manually update each, download and run the Intelligent Updater file:

    https://www.symantec.com/security_response/definitions/download/detail.jsp?gid=sep

    This article may also help:

    Use Intelligent Updater to update definitions for Endpoint Protection



  • 5.  RE: SEPM client only configuration

    Posted Jun 08, 2017 01:24 PM

    thanks. will try that.



  • 6.  RE: SEPM client only configuration

    Posted Jun 08, 2017 01:37 PM

    You're welcome.



  • 7.  RE: SEPM client only configuration

    Posted Jun 08, 2017 03:22 PM

    After i download the file in the using the intelligent updater, what do i need to do with it? move to the symantec directory (client)?

     



  • 8.  RE: SEPM client only configuration

    Posted Jun 08, 2017 03:24 PM

    Just run it. It does all the work.



  • 9.  RE: SEPM client only configuration

    Posted Jun 08, 2017 03:37 PM

    Oh cool. that is so handy.

    Thanks

     



  • 10.  RE: SEPM client only configuration

    Posted Jun 08, 2017 03:40 PM

    You can also script it to push to clients remotely. It should have a /q switch for silent.



  • 11.  RE: SEPM client only configuration

    Posted Jun 08, 2017 03:55 PM

    I will try that.

    how to check if the new signatures were installed?

     

     



  • 12.  RE: SEPM client only configuration

    Posted Jun 08, 2017 03:57 PM

    The latest revision is shown here, specifically look at the Extended Version:

    https://www.symantec.com/security_response/definitions.jsp

    • Extended Version: 6/8/2017 rev. 7 is the latest today.


  • 13.  RE: SEPM client only configuration

    Posted Jun 08, 2017 04:02 PM

    i clicked on that link but i was redirected to a blank page.

    How do i check on my client machine that i have the latest virus signature?

     



  • 14.  RE: SEPM client only configuration

    Posted Jun 08, 2017 04:05 PM

    Open it, it shows right on the GUI:

    Capture_195.JPG



  • 15.  RE: SEPM client only configuration

    Posted Jun 08, 2017 04:20 PM

    ok i see it.

    but how do i know if these where installed in my client machine?


    Thanks



  • 16.  RE: SEPM client only configuration

    Posted Jun 08, 2017 04:23 PM

    Essentially by verifying each client has the latest content revision. This is a tedious process. With a SEPM you'd have a central console to verify each machine.



  • 17.  RE: SEPM client only configuration

    Posted Jun 08, 2017 04:40 PM

    ok. Is there a log file that gets generated to record whats been updated?

    Thanks



  • 18.  RE: SEPM client only configuration

    Posted Jun 08, 2017 04:42 PM

    There is the Log.IntelligentUpdater.txt file in the %temp% directory of the profile it was run under.