Endpoint Protection

 View Only
  • 1.  SEPM in DMZ

    Posted Nov 17, 2009 07:32 PM
    Hello,

    Version: 11.4014.26

    I have a SEP manager server in our DMZ which I want to be a live update source server for an internal SEP manager server. Basically I want to make the server in the DMZ an upstream server for live update, and have the internal SEPM server get it's updates from there.

    Do I need to use LUA to do this or is it possible to just point the internal SEPM to the SEPM in the DMZ?

    Any help would be appreciated.

    Nick.


  • 2.  RE: SEPM in DMZ

    Posted Nov 17, 2009 09:46 PM
    The SEPM can take the definitions from the Defauly Symantec server or the internal liveupdate server which could be a LUA. Multiple SEPM'S can take the update from the Live Update Administrator. SEPM cannot take the updates from another SEPM.

    Liveupdate source servers for SEPM.JPG


  • 3.  RE: SEPM in DMZ

    Posted Nov 18, 2009 12:19 AM
    If you have one server in DMZ and other one outside DMZ then you can get the update in two ways...


    No1:
    If you have installed the second server as replication partner then include liveupdate content in replication setting under admin-->server--> replication-->second server properties-->select replicate client package and liveupdate.
    open ports related to SEPM traffic in the firewall.
    REF:
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007090614430148

    No2:
      Install liveupdate admin on server1(Inside dmz) and cinfigure liveupdate setting of second server to point to first server LUA distribution center.
    REF:
    https://www-secure.symantec.com/connect/articles/installation-and-configuration-lua
    https://www-secure.symantec.com/connect/articles/configuring-distribution-center-lua


  • 4.  RE: SEPM in DMZ

    Posted Nov 18, 2009 12:37 AM
    Thanks, that does answer my question. Going from SEPM to SEPM would have been ideal. I would like to manage the DMZ machines separately so will install LUA and go from there.

    Nick.


  • 5.  RE: SEPM in DMZ

    Posted Nov 18, 2009 01:00 AM
    Try the suggestion and get back to us.....
    If you have got the answer pls close this discussion by marking any post as answer...