Endpoint Protection

We have installed a SEPM v11.5 server and migrated all of our windows clients to SEPM v11.5.  Prior to that we had a Netware 6.5 server running Symantec System Center and distributing Symantec antivirus v10 to our windows clients.

At this time I no longer need Symantec System Center (running on netware) to manage the windows clients but I do want to keep Symantec antivirus on my Netware servers (to protect the Netware file shares) until we completely migrate off of Netware 6.5.

What I need to know is how to do this.  I am totally new to Symantec Antivirus and Endpoint.  How can I stop the Symantec system Center from managing any clients yet keep the symantec antivirus service running on my netware server.  I also want the Symantec antivirus service on the Netware server to continue to retireve updates from the symantec site.  I would like to turn off as many Symantec System Center features that are no longer necessary in order to give those resources back to Netware.  Or uninstall them if possible.

Any help is appreciated.

Once you migrate users from SAV to SEP, and they are not managed through the new SEPM, the clients will not check back into the SSC.  You can just leave things as is IMO.  

As for services or NLM's to kill, I haven't a clue.  I'd just leave it as it.  

You could possibly just uninstall all of it, and instead have a single host on the network scan the network shares on a weekly basis?

Its not the SSC but the SAV server that downloads and distributes the definition. 

Once you move your clients from SAV to SEP it will automatically stop reporting to SSC on netware.

I will suggest keep all the settings and software intact on your netware server.

Moving SAV clients (windows) to SEP will not impact anyhow on the SAV server/SSc on netware

Thanks for your replies. 

What I understand from your respones is that the windows clients are no longer reporting to the SSC or SAV Netware server and therefore are not utilizing any of the resources on the Netware box.  So is it safe to say that SAV/SCC running on netware is not using many resources if it is not managing any clients?  I was thinking I could get back some resources if the SAV services werent running on the Netware box.

Another option, like teiva-boy said, is to scan the shares periodically from a client out there on the network and remove the software completely from the Netware servers.  My concern is that this is a reactive not a proactive solution.  From what you guys are saying I'm getting the impression that my options are limited given the fact that we are talking about Netware.  I'll give it some more thought.

You can remove Symantec System Center.

If I remove Symantec System Center will the Netware server still be protected by Symantec Antivirus?  Will it still recieve signature updates?  How would I configure settings for Symantec Antivirus running on the Netware Box?

Any advise is appreciated.

Yes it will receive definitions from Internet and you can configure Settings for SAV from the SAV GUI itself but it has limited options.

But since SSC will not have any other client so it will not use much resource so you can leave it as it is.

You can unload the NLM for SSC and when needed for any configuration you can load it back.

However since it will be single server and Netware so I think you won't have to add much settings than you have already added.

Hi WanMan,

I have been using SAV on my NetWare 6.5 servers for about 5 years now.  Though all my other machines are now defended by SEP, I have SAV 10.1 MR9 on NetWare. 

SAV on NetWare can be configured to receive its definitions from another SAV server or directly downloaded via ftp from Symantec's LU servers on the Internet.

The reason that I recommend keeping the SSC is because the GUI of SAV on the NetWare server itself is extremely limited.  It's far easier to configure settings and view logs from the SSC than on the NetWare server itself. 

The SSC is basically just a MMC snap-in: it does not place a heavy burden on the server where it is installed. There's no a great deal of the sphisticated functionality of the SEPM built into it. You wll save yourself a lot of inconvenience if you keep the SSC and use it solely for the NetWare serevrs in your organization.

Please let the forum community know if this answers your question or if there are any additional specifics that I can help with!

Thanks and best regards,

Mick 

Great information.  Thank you all for responding.  Clearly everyone who responded agrees that although i can remove the SSC its better to keep the SSC installed as its easier for administration and does not utilize many netware resources as long as there are no clients communicating with it.

This question has been answered.