Endpoint Protection

I want to create a SEP 12.1 package and disable/block the SEP clients downloading virus definitions from Symantec.com for the frist time.

After installing SEP applicaton it should download definitions from SEPM/GUP insted of internet (symantec.com)

why not include the latest definition in the package, check this article

https://www-secure.symantec.com/connect/articles/export-client-packages-small-size-latest-definition-no-definition

and while creating a package include the LU policy for the group which says updates from SEPM /GUP.

Hello,

To Answer your Question, when SEP version 12.1 clients are deployed with Packages from SEPM, these packages are created with Latest definitions in it.

So as soon as SEP clients gets installed, the clients are installed with latest definitions.

Now, incase, these clients are Mobile machines, and then connect to the SEPM for definitions however, say incase, they are unable to fetch the entire downloads, then the next time it downloads it would download the same definitions again. 

i.e; It would fetch those days definitions which have not been received by Clients.

Here are few Article for you:

Symantec Endpoint Protection 12.1: Installing the Manager for the first time and deploying clients

http://www.symantec.com/docs/TECH163580

Creating custom client installation packages in the Symantec Endpoint Protection Manager console version 12.1

http://www.symantec.com/docs/TECH165801

Upgrade clients to SEP 12.1 by Auto upgrade feature

https://www-secure.symantec.com/connect/articles/upgrade-clients-sep-121-auto-upgrade-feature

Also, 

See About the types of threat protection that Symantec Endpoint Protection provides.

See Configuring client installation package features.

After installation, you can enable or disable the protection technologies in the security policies.

See About enabling and disabling protection.

See Performing tasks that are common to all security policies.

Also, check this Script to update SEP 12.1 installation packages

https://www-secure.symantec.com/connect/downloads/script-update-sep-121-installation-packages

Hope that helps!!

Creating Symantec Endpoint Protection client installation packages

http://www.symantec.com/business/support/index?page=content&id=HOWTO59431

How to configure LiveUpdate Administration Utility 1.5 to download definitions for Symantec Endpoint Protection 12.1

http://www.symantec.com/business/support/index?page=content&id=TECH164742

Symantec Endpoint Protection Manager 12.1 - LiveUpdate - Policies explained

http://www.symantec.com/business/support/index?page=content&id=TECH178257

Hi

 To create a SEP 12.1 package

Open the Symantec Endpoint Protection Manager console.

On the Admin Tab, under Tasks, click Install Packages.

Under Install Packages, click Client Install Settings.

Under Tasks, click Add Client Install Settings.

Specify the name you would like the custom Client Install Settings to have.

Give the custom Client Install Settings a description.

Select an installation type 

Select the installation location (default or custom folder). 

Select whether or not to maintain all previous logs, policies, and client-server communication settings

Viewing the 'Schedule Reboot' tab, consider whether to force or schedule a reboot.

Click OK.

HI Pete,

I cannot create package every now and then. We have close to 120 locations across the globe. I will create one package which will report the clients to the Default group. I will send this package to these locations where the local IT support will install when they image the OS. I am seeing GB of data downloading from SEPM server on few site where we have just 70 to 90 computers.

Regards,

Rajesh.