Endpoint Protection

Hello,

I'm deploying some client using web link sent over e-mail. I noticed that no mather that I'm selecting different features for some client in the e-mail template is the same link for all the clients with different feature set. 

I noticed that the SEPM is creating a client in a specific location depending of the group, now for example I have group Users and some of the users wants client without some specific features , so I create a client with specific features I open client deployment window and I send an e-mail with web link to the user and the link is http ://SEPMServer/EmailInstallPackages/B57621160A23020B015410FEF88BF8D2_WIN32BIT/sep/Setup.exe

After that another user is asking a client with full set of features and I use the client deployment wizard to add user again in Users group on SEPM and I send him web link to use client with full features and the link again is the same .

http ://SEPMServer/EmailInstallPackages/B57621160A23020B015410FEF88BF8D2_WIN32BIT/sep/Setup.exe

Does that mean that SEPM is overwriting the client and if some user that wanted sepm without specific features now will install client with full features because that's the last client created for deployment?

What's the exact version of SEPM you're running here?

To cover all bases, have you reviewed this link?

http://www.symantec.com/docs/HOWTO80787

Version 12.1.2015 I.

I checked that but there is not saying anything regarding the issue I'm experiencing. 

The thing is I can deploy a client without any problem but seems like the last client created for deployment is overwriting the previous one with specific features enabled .

I've not seen it overwrite before.

When you go thru and set it up for the next user, do you select the same settings as you did for the first (on client deployment wizard screen)?

No, here an example.

On the first one I select client without firewall I finish with the wizzard and in the e-mail  is following link.

//Servername/EmailInstallPackages/B576211_WIN32BIT/sep/Setup.exe

The only thing that is the same is the group

Second one I select client with full set of features I finish with the wizzard and in the e-mail is again the same link:

//Servername/EmailInstallPackages/B576211_WIN32BIT/sep/Setup.exe

and in that directory there is only one file.

But it is the correct package, meaning it has the correct feature set that you intended for the second as compared to the first?

What would suggest is to check the hash of the first package as well as the second package and comapre them. If different, than it looks to overwrite it.

Yes it has the correct one for the second one, but when the first user is trying to install the package instead of the first one created for him is installing the second one with full features included. 

I wanted to know if this is normal activity and when I send e-mail to someone with the client they need to install it right after? 

Ahh ok, so if they don't install the first before you create the second, they get the second package.

Just by looking at the behaviour of it, it seems to be by design because it assigns it the same naming convention. Testing it out on my system, I'm seeing the same behaviour.

Do you know if there is some way to make it every time to create new folder/link for the client ? 

Or I will need to put it on a shared location all the clients with specific features and to send link to the user to install it from there?

I'm testing now and confirm it just gets overwritten.

Here's what I would do. Create the package like you have been doing. Once it's completed, it will be located in the following location:

C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\EmailInstallPackages

It takes a few minutes for both (32 and 64bit) to show up so I would give it 5 minutes or so to be created. Once done, grab the packages and make them available from a network location.

The first article I linked in my first post seems to allude to that as well.

Yes that sounds good, also I was thinking instead of selecting to send it over a web link to go with "save package" to save it and to share it internally.

Do you know if where it can be adressed this as a suggestion to Symantec in some of the next version to develop it in that way that it will create separate location for each package deployment?

From what I tested I can see that is creating different folder depending on the group but not on the feature settings.

That should work as well.

You can submit a suggestion:

How to submit a suggestion for a Symantec security product

http://www.symantec.com/docs/TECH94818

Thank you Brian,

I submited it, in case you want this to be implemented you can vote it up here:

https://www-secure.symantec.com/connect/ideas/improve-deployment-over-e-mail-web-link

Done