Endpoint Protection

We are running Symantec Endpoint 12.1. We have a number of mobile devices that have internet access but rarely connect to our domain. How do we get the antivirus updated?

Thanks

Hello,

Please check out the below link,

Configuring mobile computers to automatically download definitions when disconnected from the Symantec Endpoint Protection 12.1 Management console

http://www.symantec.com/docs/TECH177361

Since the devices don't reconnect to the LAN, the devices won't update a policy change. Is there a way to make manual changes to the client to use the internet liveupdate server vice the management server?

Hello,

There is no way to make manual changes to the client to use the internet liveupdate server vice the management server.

https://www-secure.symantec.com/connect/forums/clients-receiving-updates-outside-network

You would require these clients to connect to your domain atleast once.

Secondly as per my knowledge, you can export policies from 1 client to another client. So, incase if you have a client which already has the same policy which you want to place in those clients, then you can export the same and telll the user to import on their machines.

This could be achieved by the steps provided below:

1) Export the Policies from the SEP client Machine already running that policy.

• Open the SEP client 
• Click on Help
• Click on Troubleshooting
• Under Management, Click on Export Button.
• Export the Policy in .xml format on the Hard Drive.

2) Send the Policies to the User via Email or by any other means with the Step on how to import policies.

3) User would import the same on the SEP clients installed on their machines.

Steps to Import - 

• Open the SEP client 
• Click on Help
• Click on Troubleshooting
• Under Management, Click on Import Button.
• Import the Policy in .xml format from the Stored Drive.

(I am working on an Article with these steps which would be published soon..)

Hope that helps!!

Can a .jdb file be used on a client?

You can use 2 methods.  Using the intelligent updater or using the JDB files.

.JDB files will only update AV/AS content

http://www.symantec.com/business/support/index?page=content&id=TECH104363&locale=en_US

Using the intelligent updater, definitions found here as an executable, you can update everything.

http://www.symantec.com/security_response/definitions/download/detail.jsp?gid=savce

If you do not have a Password protecting your clients.

You can send an "updated" Sylink.XML file extracted from a package for your clients, instructing them to use LiveUpdate instead of the internal SEPM server. 

You would also need to provide them with the Sylinkdrop.exe file in order to be able to update the Sylink.xml file.

* * * * * * * *

If you do have a password, Sylinkdrop.exe offeres a "silent mode" and a password input capability.

SYLINKDROP -SILENT -p "uninstall password" [path to:\]SYLINK.XML

Now this might not be practical, but you could package this into a self extracting, self executing EXE or package it into an MSI file. 

That way you can still keep the uninstall password hidden.