how to configure Symantec Endpoint Protection Manager (SEPM)?

Hello
We are using Symantec Endpoint Protection Manager (SEPM) ver 11.0.5 on SBS 2003 server. I have few questions regarding this:
1.      We renewed license for SEPM and received new license file. However I can’t find any option to install license file when logged into SEPM Console. What is the way to update licenses?

2.      How can I remove Client Install Packages for 64bit Windows? We don’t have any XP running 64 bit OS, so if I try to delete that, I am getting message that I can’t delete it.


3.      How can I setup a policy for managed clients(specially Laptops) so that they can be set up to receive updates from local server when laptop is on LAN and get updates from internet when laptop is not on LAN?
bpjenningsAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ugnvsCommented:
1. As far as I remember, SEPM is free to use. License is for central upgrade repository.

2. Why? It won't hurt. Well, I could not remove it either :)

3. There are policies and locations in SEPM... and update sources can be configured differently for them. But I can not be absolutely sure that laptop would automagically select appropriate policy and/or location based on ip address.
0
jhalapradeepCommented:
Hi,

1) You dont need to install the license file in Symantec Endpoint Protection. You will just get the license certificate. It will automatically get registered once installed.

2) Yes you cannot delete the packages that comes along with the SEP installation. They are listed there just to create new custom packages, just in case you need 64 bit installations. You can only delete the package that you add manually in there.

3) You can setup a liveupdate settings policy for your scenario:
-> open SEPM console
->You need to create a separate group with laptops.
->Go to the clients tab and click on policies
->Uncheck "inheritance" option at top.
-> Also click on the liveupdate settings policy and conver it to non-shared, so that changes made in this policy will not be shared by any other groups.
-> Now open the Liveupdate settings policy(non-shared)
-> click on server settings: now put a check mark on first two options and by default the first radio button(use default symantec liveupdate server) should be selected under the second check box.
->Click Ok. and within some time this policy will be updated on the clients(laptops).
-. Now for the clients first priority will be to download updates from  SEPM console and if that fails, it will go to internet and download updates from symantec liveupdate server.

Regards,
Pradeep Jhala
Symantec Technical Specialist (Endpoint Protection)
0
jhalapradeepCommented:
Hi,

Here is the screenshot of how the liveupdate settings policy should look for the settings that you want to implement for laptops.


Regards,
Pradeep Jhala
Symantec Technical Specialist (Endpoint Protection)
liveupdate.JPG
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

bpjenningsAuthor Commented:
Hello jhalapradeep,

Thanks for prompt reply.  
For point 3 I will try updating live update settings policy and let you know. By the way, If I leave both Laptops and Desktop in a same group and setup policy as u suggested. By default it will get update from local servers anyway and updates to laptops will apply via internet when the laptop is not on LAN.
0
jhalapradeepCommented:
Yes that is correct. You may setup a single group. No issues.

Regards,

Pradeep Jhala
0
bpjenningsAuthor Commented:
Screenshots in the solution are easy to follow
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.