Endpoint Protection

I am not very sure whether Licensing related concerns can be addressed in this forum or not. However, just trying it out.

We have one Machine which runs Windows 2003 Server, and that machine is accessed by 15 diskless nodes, running in a Thin Client mode.

How many SEP 11.x License do we need to purchase.

#1. Sixteen? One for server and 15 for nodes?

OR

#2. Just 1 for the server

Tejas

It seems like you would just need one as long as I am understanding your post correctly. So when you say 15 diskless nodes do you mean 15 dumb terminals that are just able to access one file system? If that is the case  then you only need one. I like to think of it as each filesystem you have, you only need one license to protect. Each of the other terminals are just sessions for that one server, so they don't matter. At least I think this is correct, but you might want to order over the phone and ask those questions to our marketing team.

SEP 11 worls on per user license if i am not mistaken. So it would be 1+15. Having said that, i would rather leave someone from Symantec to agree or disagree to this

Someone from symantec would know about this!

Mr Shah

I implemented it at one of my Customer's end.  Just think of MS Office u r using, have u purchased 16 or one. I guess its one.  In Terminal server the thin clients connected to use the space of  TS so they have nothing in them. 

You need to have 1 license for the server and the rest 15 diskless nodes doees not need it because u cannot unstall on to them.

Regards
Ajit Jha

As you want to access the server from 15 thin clients, you need 1 Server License and 15 client licenses.

require one

I think that should One.

because thin clients only uses the virtual images of the server.

Yes, here comes the confusion. Though Thin Clients use virtual images of the Terminal Server, they are actually sharing the SEP's functionalities and that's why you need client licenses just like any other applications.

Symantec Endpoint Protection 11.0 uses the Symantec-standard “per-user” perpetual license model. The formal Symantec definition of the “per-user” meter allows several interpretations of the metering method, including user or device. As it applies to Symantec Endpoint Protection 11.0, one license must be purchased for each standard (i.e., non-virtualized) endpoint device running the software, regardless of endpoint type (e.g., server, laptop, workstation, etc.). For virtualized environments, (e.g., VMware or Terminal Services), each separately installed and concurrently running instance of the software must be licensed

You require 16 licenses: one for the server itself and one for each user, either on the remote host or the Terminal Server, but not both. If each of the 20 laptops/computers used to access the Terminal Server are licensed, then only the one license for the Terminal Server itself need be additionally purchased. If the remote clients are not licensed (such as thin clients that cannot run the Client), then the full 16 licenses should be purchased for the Terminal Server. The remote hosts and the Terminal Services users do not both need to be licensed.

Ok, Paul. I'm convienced.

Assuming what you are saying is correct, please answer further questions...

In the same setup mentioned above, tell me....

#1. How many times shall I install SEP, once or sixteen times?

#2. In SEPM, how many clients will it show? One or Sixteen ?

#3. How would I configure the SEPM for device control policy? Can I control USBs on my Thin Clients nodes?

Regards

Tejas

Assuming you have NO disks in the thin clients, then the answers are as follows:

1. You will install it once, on your terminal server.
2. It will show one client, your terminal server.
3. Device control at this point is for the server, without SEP installed on the thin client (which you can't, it doesnt have a drive) you can't control local devices.

Believe me, the answers are correct, they are from the licensing guide used by sales and partners.

Nice clarification for Paul. Thankx

Hi Paul,

That was a very quick and simple, easy to understand answer. Your answers also falls in line with my expectaions.

I'm sure, since we do not have more than 1 installation of SEP client, we can not have user specific application control policy as well. (Since there not more than 1 SEP clients, as against 16 or more users in Windows 2003 server)

Further, coming back to licensing concern, please clarify the anomaly...

Why it's so that for a single software installation, with one client showing on the SEPM, one needs to purchase 16 licences.

Expecting the logical reason behind the same for proper understanding.

Tejas

Dear Binayk

There is no need to perchase separate license for the thin clients. just instll SEP on TS and all the think clients will have the image when they login.

Remember L&T

hi Ajitja, request you not to mention any comapany name in an open forrum. However, please clear your concept regarding licensing. If only one license is required then each and every company will only go for terminal server irrespective of number of clients they have and in that case say for example for 6000 users they require only one license which is absurd.

Yes, here comes the confusion. Though Thin Clients use virtual images of the Terminal Server, they are actually sharing the SEP's functionalities and that's why you need client licenses just like any other applications.

I belive the clarification has come for this question. Admin should close this thread for further comments.

Tejas

Guys, the best practice in Symantec connect is, to close the thread as a solution, when the author feels that he really got a solution.

So Mark as solution, once you get the same,

The licensing anomaly...

Why it's so that for a single software installation, with one client showing on the SEPM, one needs to purchase 16 licences.

Tejas

One good forum I just now come across on working of SEP on Terminal Servers...

https://www-secure.symantec.com/connect/downloads/best-practices-symantec-endpoint-protection-citrix-and-terminal-servers

I was very keep on getting a clarification on licensing anomaly, if someone can clarify my doubts.

Tejas