Endpoint Protection

Greetings,

We are deploying SEPM 12.1.5 to users who have upgraded their MAC OS to 10.10 (Yosemite) as it seems that 12.1.5 is the only version of SEPM that would work with Yosemite based on this article:  http://www.symantec.com/business/support/index?page=content&id=TECH131045

The installation is successful, but the Symantec Endpiogn icon in the OSX task bar does not show the green checkbox that it normally does. It seems that all connectivity is well, status shows that it is connected to the SEPM server, it's receiving policies, etc...  Wondering what I'm missing...

Thank you,

Chris M.

Is the check in status updating if you force a check-in?

Yes, it is.  I just tried installing it on another Yosemite Air for the sake of it.  Same issue.

Hi Chris,

Thank you for posting in Symantec community.

I would be glad to answer your query.

SEP clients for Macintosh cannot retrieve updates the same way that Windows clients can from the SEPM or from GUPs. As of SEP version 12.1 RU4 the SEPM can be configured as a reverse proxy for downloading and caching Macintosh LiveUpdate content but this method is only for retreiving the latest Macintosh RU4 content -- i.e. you cannot use this method to provide back-dated definitions to Macintosh clients or content to older Macintosh clients or other platforms. The SEP for Macintosh client must otherwise retrieve definitions from the default Symantec LiveUpdate server or an internal LiveUpdate Administrator server.

Reference: Will a managed Symantec Endpoint Protection for Macintosh client update virus definitions automatically from a SEPM or GUP?

http://www.symantec.com/business/support/index?page=content&id=TECH131735

Enabling Mac and Linux clients to download LiveUpdate content using the Apache Web server as a reverse proxy

http://www.symantec.com/docs/HOWTO85034

http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=nmc

From a SEPM.  I want to mention that we have Multiple MAC systems on our network, and different versions.  We have a MAC Clients OU in sepm, and all MACs are in that OU.  However, it is only the 10.10 machines that do not report the green checkmark, the other OSX versions (10.8, 10.9) all do.

Hi,

As with the Windows clients, the SMC daemon will need to be restarted for the client to point towards its new SEPM. This can be accomplished via either restarting the Macintosh, or opening the Terminal and entering the following commands:

Chetan,

Tried that already.  We replaced the Sylink.xml file and even restarted.  It doesn't seem to be a communication issue withe the Sylink.xml because the status does show connected, the internal SEPM 192.x.x.x server name is there, the policy is there... it's all working as it should, just the icon is the generic symantec icon; no green check.

Hi,

What's the upgrade path for MAC 12.1 RU5. 

How many clients are affected?

Just for testing purpose could you do a fresh install or reinstall?

Note: I have deleted my previous comment, by mistake I had copied it here :( 

Chetan,

A Symantec sr. support engineer got back to me just recently with this: 

"It appears the new client won't show a green dot nor a checkmark, to check whether the client is communicating with the Symantec Endpoint Protection manager (SEPM), just choose Management, if connected it should show the SEPM's IP address, "Connected" under the connection status and the policy serial number."

It seems by design its like this.

Ahhh, I was wondering the same when I was refering this article.

How to determine if SEP for Macintosh is installed and running

http://www.symantec.com/docs/HOWTO100463 

However could you share the support case number.

Symantec Case: 07539570

Thanks for sharing case number.

I can confirm it's by design.

Here is the documentation: Symantec Endpoint Symantec Endpoint Protection for Macintosh Frequently Asked Questions (SEP for Mac FAQ)Protection 12.1.5 (RU5):

http://www.symantec.com/docs/TECH134203

Check this following question in the above KB.

How do I know whether or not the SEP for Mac client is managed?

Ah, i see.  Wonderful.  Thank you for your help Chetan.