<This post has been edited by Symantec Support>
How to Install Symantec Network Access Control when SEPM is already installed and Running
About SNAC: Symantec Network Access Control ensures that a company's client computers are compliant with the company's security policies before the computers are allowed to access the network. Symantec Network Access Control uses a Host Integrity Policy and an optional Symantec Enforcer to discover and evaluate which computers are compliant.
Availability: Symantec Network Access Control can be downloaded from https://fileconnect.symantec.com.
How to enable: Upgrade from CD.
a. When you put the cd "Symantec endpoint protect installation program" menu will appear. If its not coming open the CD and run setup.exe (It is there in the root directory).
b. Select Install Symantec Network Access Control.
c. Select Install Symantec Endpoint protection Manger. Now it copies the License file and starts configuring SEPM.
d. Once the "Management server upgrade wizard" starts click Next.
e. Once Wizard is complete click "Next" and "Finish".
f. After the upgrade wizard SEPM configuration wizard appears.. Provide the appropriate values and complete the configuration.
Now your SNAC installation is complete.
How to see SNAC component on SEPM and Clients:
After the installation OF SNAC "Host Integrity" policy will appear under Policies tab. Now you can modify and assign it to any group.
Once clients get that policy you will see Network Access Control on Client UI.
Hope this will help administrators.. In case of any correction.. please comment....
XPlus1 please versify that you are in fact using 12.1.1 SEP, go to help and about in the SEPM to verify this.
D@ry1 Yes you can install SEP to an existing SNAC manager.
John Santana The difference is in your post, one is multi-platform and the other is just for windows, and the reason is someone might only want the windows platform edition (starter).
Chuck Edson No need to reboot server anymore unless directed by the installer.
To the rest please be sure to download the template policies via live update to be able to use the HI policies, you will get a warning if you have not done so and try to assign a HI policy. This can be done by going to the admin tab then select the local site and select "Download LiveUpdate content".
I've attempted to follow the instructions in this article, but every time I run setup.exe from the Symantec_Network_Access_Control_SE_12.1.2_Full_EN package i receive: "A newer version of Symantec Endpoint Protection Manager is already installed."
We installed SEPM last week using the installer package: Symantec_Endpoint_Protection_12.1.2_MP1_Part1_Installation_EN. There is no MP1 installation package for SNAC listed in FileConnect. Is the installation of SNAC possible using 12.1.2, or do I need to wait for a MP1 package?
@kintachi, for Enterprise you will still need a SNAC license to be compliant and avoid getting license reporting alerts.
Hi,
May I ask, is this installation may resolve the issue on SNAC license? Thanks.
Hi, can we do this the other way around? we have SNAC running but planning to add up the SEP functionality,.
Thanks,
What's the difference between "Network Access Control Starter Edition"
why there is starter edition ?
This artcile helped me lot to do the SNAC with SEPM already installed.
Thanks.
I found that if I had already applied an SPS 4.0 (SNAC and SEP activation in one .slf) license that includes the SNAC activation first and then tried configuring SNAC by going through the setup.exe, the SNAC component still showed as unlicensed.
I then deleted the license file and then reapplied and found that SNAC was then added as a licensed feature.
Just thought I would bring this up in case anyone was wondering how to activate SNAC in SEPM if the license was previously applied.
great article, very thanks.