Endpoint Protection

 View Only
  • 1.  SEP self managed vs centrally managed

    Posted May 13, 2011 11:39 AM

    My company currently has licenses and is considering deploying SEP 11 client to all of out machines.  We currently have Symantec Antivirus 10 that is entriely server managed.

    Is there anything wrong with having technicians go around and install the clients all as self-managed, configure the settings they want for updates and scans, and then leave them as unmanaged and never even install a server client?

    Or is having a management server that downloads all the updates and distributes them to clients and can command all managed clients really a much better option?

    Also, if I setup a client as managed, will I still be able to do scans manually on those clients and pull updates from Symantec manually should I so choose?



  • 2.  RE: SEP self managed vs centrally managed
    Best Answer

    Posted May 13, 2011 11:44 AM

    Is there anything wrong with having technicians go around and install the clients all as self-managed, configure the settings they want for updates and scans, and then leave them as unmanaged and never even install a server client?

    ---There is nothing wrong , but it will take time and would be hectic and tiresome for you.

    Or is having a management server that downloads all the updates and distributes them to clients and can command all managed clients really a much better option?

    --THE BEST OPTION

    Also, if I setup a client as managed, will I still be able to do scans manually on those clients and pull updates from Symantec manually should I so choose?

    ---YES, all can be configured from SEPM.

     

    So please do not hesitate and go for a managed installation of SEP with SEPM. It would give you ease of adminstartion and reporting and much more



  • 3.  RE: SEP self managed vs centrally managed

    Trusted Advisor
    Posted May 13, 2011 11:50 AM

    Hello,

     

    I have suggested the below Steps for Migration from SAV 10 To SEP 11.0.6005 (Normally, Customers would like to Install SEPM on either the same Server where the Symantec System Center is Installed OR on Different server computer)

    Before you start with the Procedure of migration, make sure, you disable the Security Password to disable SAV clients from SSC.

     

    1) Install Symantec Endpoint Protection Manager,

    2) Create new SEP 11 packages for new Deploy on all the other machines.

    3) Deploy the packages to all SAV 10 client machines, which will migrate all the clients to SEP (this could be done either with the help of "Migration and Deployment Wizard" OR "Find Unmanaged Computers"

    Till the time the migration is over, the clients which haven't migrated from SAV 10 will communicate to Symantec System Center 10.

    4) Once all the machines have been migrated from SAV 10 to SEP 11.6005

    (Except on the same server machine where the Symantec System Center 10 is installed, as SEP will not get installed till Symantec System Center 10, SCS 3.1 is uninstalled.),

    5) Uninstall Symantec System Center 10, SCS 3.1 on the server

    6) Install SEP on the same machine where the Symantec System Center 10 was uninstalled.

     

    Symantec Knowledgebase Articles for Migration.

    1) How To Migrate From Symantec Antivirus System Center Console To Symantec Endpoint Protection Manager

    http://www.symantec.com/business/support/index?page=content&id=TECH106485

    2) Obtaining an upgrade or update for Symantec Endpoint Protection 11.x or Symantec Network Access Control 11.x

    http://www.symantec.com/business/support/index?page=content&id=TECH103088

    3) 'Installing and configuring Symantec Endpoint Protection 11 for the first time'

    http://www.symantec.com/business/support/index?page=content&id=TECH102397

    4) Creating custom Client Installation packages in the Symantec Endpoint Protection Manager Console

    http://www.symantec.com/business/support/index?page=content&id=TECH102817

    5) How to Deploy Symantec Endpoint Protection to your client computers using the Migration and Deployment Wizard.

    http://www.symantec.com/business/support/index?page=content&id=TECH102907

     

     

    NOTE: Make sure, you upgrade SAV 10 to SEP 11.0.6005 and later to SEP 11.0.6300

     

    Migrating to Symantec Endpoint Protection 11.0.6300 (RU6 MP3)

     
    Hope these would help you!!!


  • 4.  RE: SEP self managed vs centrally managed

    Posted May 13, 2011 12:44 PM

     

    Is there anything wrong with having technicians go around and install the clients all as self-managed, configure the settings they want for updates and scans, and then leave them as unmanaged and never even install a server client?

    Ans. If you have less than 10 Clients then only Unmanaged clients will be a suitable option. Or else Having a Management Server is best option, you can manage the clients well and all clients willl not have to download full definitions.

     

    Or is having a management server that downloads all the updates and distributes them to clients and can command all managed clients really a much better option?

    SEPM server is always better option. As you have single control for all clients however clients can run scan, disable AV,Firewall etc and do everything that you can do from the SEPM.

     

    Also, if I setup a client as managed, will I still be able to do scans manually on those clients and pull updates from Symantec manually should I so choose?

    Yes You can.



  • 5.  RE: SEP self managed vs centrally managed

    Posted May 13, 2011 01:11 PM

    I don't believe it is necessary to go from SAV > SEP RU6a > RU6 MP3, and IMO just needlessly lengthens the process. The SEPM installation is considered new--it is not a migration, since no SEPM has yet existed. There are no database schema changes etc. about which to be concerned.

    The SEP client should be able to seamlessly migrate over any SAV build on the 'supported migration path' list, per the document noted above:

    How To Migrate From Symantec Antivirus System Center Console To Symantec Endpoint Protection Manager
    http://www.symantec.com/docs/TECH106485

    sandra