Symantec Endpoint Protection

Forums › IT Pro and developers › Symantec Endpoint Protection

Neochick

49 posts

Geek

#45394 1-Nov-2009 20:18

So, the Ministry of Education has decided to go with Symantec for schools anti-virus needs.

I work at a local intermediate school and am having the 'pleasure' of rolling this out. It took me 2 and half hours of googling to get into the Symantec Endpoint Protection Manager after intstalling it, by way of some obscure reference mentioning that folder permissions need to be changed if its not installed on the C: of the serer. I had tried changing ports, reinstalling, changing settings. Was not impressed.

Anyway, just wondering if anyone else has had experience with this and can give me any tips or tricks for when i get back to work on tuesday.

If you have, you can't tell me how to get Live Update on the server to save its updates to somewhere other than the C:? Its kinda running out of room on there (yea, server isnt the best)

Cheers everyone

jaymz

1133 posts

Uber Geek

#269309 2-Nov-2009 16:28

Yeah, we are planning to roll this out early next year for one of our clients. After their current AV subscription runs out.

Interesting about the folder permissions issue for less than standard installs!

Not too sure about the LiveUpdate side of things, might be a registry key that will allow you to change the default location.

p.s. did you notice the way they have done the licesing on the product?? our copy was completly open!

Neochick

49 posts

Geek

#269349 2-Nov-2009 18:16

I didn't have to input any licencing data at all. Apparently its inbuilt with the Ministry of Education version of it. I will have a better look at it when I am at work tommorow

xpd

Geek @ Coastguard NZ
13765 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#269373 2-Nov-2009 19:13

We just got rid of SAV/EP from most of our office servers - one of them was hauling in 100GB a month of updates - even Symantec couldnt tell us why but it was confirmed as being EP causing it.
It also seemed to report viruses but not actually stop them from doing anything........ and yes, we had been through the manual and everythign was set correctly.
Weve moved to Eset (Nod).

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree

jaymz

1133 posts

Uber Geek

#269425 2-Nov-2009 20:57

xpd: We just got rid of SAV/EP from most of our office servers - one of them was hauling in 100GB a month of updates - even Symantec couldnt tell us why but it was confirmed as being EP causing it.
It also seemed to report viruses but not actually stop them from doing anything........ and yes, we had been through the manual and everythign was set correctly.
Weve moved to Eset (Nod).

We moved to NOD32 when symantec first released EndPoint, shocking peice of software! But you can't really argue when it comes to price. Ministry of Education gives it to schools for free which is alot cheaper than paying for NOD32 :P

Interesting thing to note is the EP management tool looks very very similar to what Symantec Mail Security for MS Exchange looked like.

My only bug bear so far with it is the huge installed size over 500MB per client and 2.8Gb for the server!

JoshS

1 post

Wannabe Geek

Trusted

Symantec

#269461 2-Nov-2009 22:37

Hi Neochick,

There shouldn't be any difficulties in installing the SEPM on a drive other than C: - this is a supported configuration. What version of SEP are you running?

If you haven't done so already, I'd highly recommend having a quick skim through the "Getting Started Guide", which is included on the install media. It has a good step-by-step walkthrough of the types of tasks you'll need to perform to get the product up and running in your environment for the first time.

Re moving the SEPM's LiveUpdate downloads to a different drive, this is not supported because LiveUpdate is a shared component between many Symantec products. However, you can set the cache size that LiveUpdate uses which may help reduce the impact on your C:\ drive. See the following post for more information and related KB articles:

http://www.symantec.com/connect/forums/change-liveupdate-download-directory

On that note, the Symantec Connect Endpoint Protection forum is a good place to frequent if you have any questions like the above. It's viewed by thousands of SEP users daily as well as by Symantec technical staff. If your question hasn't already been answered, there's a good chance someone will pick it up quickly there.

http://www.symantec.com/connect/security/forums/endpoint-protection

Hope this helps!

Josh Simmons (Symantec Employee)

Buttonmash

361 posts

Ultimate Geek

#269476 2-Nov-2009 23:18

Symantec Endpoint Protection is just plain horrible. I say that because the last 2 months has been spent fixing deployment issues. (Caused directly or indirectly by the software)

jaymz

1133 posts

Uber Geek

#269504 3-Nov-2009 07:53

JoshS:

Re moving the SEPM's LiveUpdate downloads to a different drive, this is not supported because LiveUpdate is a shared component between many Symantec products. However, you can set the cache size that LiveUpdate uses which may help reduce the impact on your C:\ drive. See the following post for more information and related KB articles:

http://www.symantec.com/connect/forums/change-liveupdate-download-directory

Here is a link to where you can download the LiveUpdate Administrator: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/1999052915222048?Open

Here is a document on how to set it up: http://www.symantec.com/connect/articles/installation-and-configuration-lua

Looks like it should do the trick!

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

boby55

1539 posts

Uber Geek

Trusted

#269508 3-Nov-2009 08:00

The high school I am at are now using Microsoft Forefront (Supplyed bin the MS agreement) that seems to be doing a great job

Neochick

49 posts

Geek

#269515 3-Nov-2009 08:41

JoshS: Hi Neochick,

There shouldn't be any difficulties in installing the SEPM on a drive other than C: - this is a supported configuration. What version of SEP are you running?

If you haven't done so already, I'd highly recommend having a quick skim through the "Getting Started Guide", which is included on the install media. It has a good step-by-step walkthrough of the types of tasks you'll need to perform to get the product up and running in your environment for the first time.

Re moving the SEPM's LiveUpdate downloads to a different drive, this is not supported because LiveUpdate is a shared component between many Symantec products. However, you can set the cache size that LiveUpdate uses which may help reduce the impact on your C:\ drive. See the following post for more information and related KB articles:

http://www.symantec.com/connect/forums/change-liveupdate-download-directory

On that note, the Symantec Connect Endpoint Protection forum is a good place to frequent if you have any questions like the above. It's viewed by thousands of SEP users daily as well as by Symantec technical staff. If your question hasn't already been answered, there's a good chance someone will pick it up quickly there.

http://www.symantec.com/connect/security/forums/endpoint-protection

Hope this helps!

Josh Simmons (Symantec Employee)

I am running version 11. I could not log into the manager at all, and the event viewer kept showing an error with java. Someone mentioned changing folder permissions to include authenicated users, and now its running fine.

Thanks for the reply josh :)

buzzy

217 posts

Master Geek

#269667 3-Nov-2009 15:46

(I tried to reply earlier but it seems the reply got lost. It may turn up in the post in a few days.)

Disclaimer: I'm a Symantec employee.

Schools using Symantec Endpoint Protection provided by the Ministry of Education have access to a helpdesk for technical queries and problems. The helpdesk number is 0800 CALL ICT or 0800 225 542. Note that this is only for Symantec Endpoint Protection in schools; it's not a general Symantec helpdesk number.

Regarding jaymz' statement on the licensing, yes this is an open product, in the sense that there's no software-imposed limit on the number of clients in each school. Imposing a limit in the software would have likely caused frustrations and wouldn't have solved any problems.

Cheers
Buzzy