Endpoint Protection

Title: How to Configure the Proxy settings in the Symantec Endpoint Protection Manager (SEPM) 12.1

Solution:

1 - For Proxy server and Symantec Endpoint Protection Manager communication settings

The following steps explain how to setup the Symantec Endpoint Protection Manager to use a proxy server to download content via LiveUpdate.

1. Click on Admin
2. Click on Servers
3. In the "view servers pane" select the name of the manager under local site
4. After selecting your server, in the tasks pane, click on Edit the Server Properties, a dialog box will open up
5. Click on Proxy Server
6. Fill out your appropriate settings and credentials for HTTP and FTP as required for access.

If a network includes HTTP proxy servers, you must establish a connection between an HTTP proxy server and Symantec Endpoint Protection Manager. The HTTP proxy server automatically connects to the Symantec Subscription Services.

1. In the Symantec Endpoint Protection Manager (SEPM) select the Clients tab, then select the group you would like to modify the proxy settings for.
2. Select the Policies  tab on the right hand side.
3. Under Location-Independent Policies and Settings locate the Settings box.
4. In the box you will see External Communication Settings. 
5. Click on the link and select the Proxy Server tab.

This lets you configure clients to use a proxy server for all external communications except LiveUpdate communication. You can configure a separate proxy server to use for external communications other than LiveUpdate.

3 - Liveupdate Application.

Correct Proxy settings are also to be configured on Liveupdate Application.

1. Click on Start
2. Click on Control Panel
3. Double-click Symantec LiveUpdate. The LiveUpdate Configuration dialog box appears.
4. Click the HTTP tab.
5. Select I want to customize my HTTP settings for LiveUpdate.
6. Select Use a proxy server for HTTP connections.Enter the IP address and port.
7. In case it needs to be authorized to go out through the proxy, select that option, and enter  Username and Password for both FTP and HTTP.
   
   

   ---

   Note: The Username and Password for the proxy server are not the same as  Internet service provider (ISP)

   ---

8. Click OK.
9. Repeat this procedure for the FTP tab if necessary.

HTTP settings provide LiveUpdate with the settings required to connect to the Internet through your network.

You can change your HTTP settings using either the LiveUpdate Configuration option in the LiveUpdate user interface, or by using the Symantec LiveUpdate option in the Control Panel. By default, LiveUpdate uses the same proxy server settings that you have set up for use with Internet Explorer.

4 - Microsoft Internet Explorer.

Correct Proxy settings are also to be configured under Microsoft Internet Explorer.

1.  Open the Microsoft Internet Explorer
2. Click on Tools TAB
3. Click on Internet Options
4. Click on Connections TAB
5. Click on LAN settings Button
6. Under Proxy Server option,  enter the IP address and port.

 Note: Necessary steps should be taken to Configure the proxy settings in any Default Browser being used other than Microsoft Internet Explorer.

5 - Check the Proxy settings in the Internet Explorer of the System Account.

Try the following steps on the SEPM server machine of Windows 2003, Windows XP.

The solution need to done for the SYSTEM account, because when LiveUpdate is scheduled  to run it uses the SYSTEM account by default:

Check the SYSTEM proxy settings by following these steps...

1. Click 'Start' and click 'Run'
2. Type at 12:00 /INTERACTIVE "C:\Program Files\Internet Explorer\iexplore.exe" in the 'Run' box and click 'OK'
3. It will create a scheduled task.
4. Go to 'Scheduled Tasks' folder in 'Control Panel'
5. Right click the file named 'At1' and click 'Run'. It will open an Internet Explorer page.
6. Click 'Tools' menu, click 'Internet Options' and click on the 'Connections' tab.
7. Verify the connection settings and proxy settings.
8. SEP client would start getting updated with the latest definition.

Note: The above steps would not work on Windows Vista, Windows 7, Windows 2008.

Incase, of Windows Vista, Windows 7 or Windows Server 2008 / Server 2008 R2, check this Article: http://www.symantec.com/docs/TECH96141

6 - Incase, using an Internal LiveupdateServer (LiveupdateAdministrator)

Note: You configure proxy settings for other client  communications separately.

To specify a proxy server that clients on Windows computers use to communicate to Symantec LiveUpdateor an internal LiveUpdateserver