Symantec end-Point Protection installation

Manual

The Symantec end-point protection (SEP) is the new version of the Symantec which replaces the anti virus corporate edition, used until now.This version is consists of several elements (features0 from which only few are required for our installation.

Please follow the step carefully and execute according to instructions.

SEP prerequisites –

The SEP requires IIS installed. The IIS is located in the I386 directory of the ‘window 2003 server R2 ‘installation CD.

1. ‘Insert the windows 2003 server R2’ installation CD in the CC drive.2. Start=>control panel=> add/remove programs3. click on Add/Remove windows components

4. click details at the application server

5. check the ASP.net box (make sure it is auto checking the ‘enable DCOM access and IIS boxes as well)

6. click ok and next. When the popup window comes, please select the location of the I386 folder from the CD drive.

7. Continue with the instillation and repeat the above action if required until the installation is finished.

8. There is no need to reboot the machine. 9. Proceed to SEP installation at the next page.

SEP installation –

1. inset the SEP CD to the CD drive

2. wait for the auto run popup menu window or just browse to the setup file

3. double click on the setup, wait for popup window

4. click on the second option

and click ‘install Symantec Endpoint protection manager’

5. click next

6. accept and next

7. click next

8. click ‘create customer site’ – and then next

9. click install

10.click finish

11.open the main installation window again and click on ‘install Symantec Endpoint

protection’

12.click next

13.click accept and next

14.click next

15.click install

16.click finish

17.A new window should come up – ‘management server configuration wizard’. Please proceed to management configuration -

Management configuration – Management server configuration Wizard

1. Clicknext.

2. please choose the name of the server (for example IPS) and make sure the location of server data folder to have the following path ‘D:\Program

Files\Symantec\data, as follow

3. approve creation of a new folder

4. please choose a name for the site – ‘topaz’

5. please choose a password to be the password you are using for the system (if I am correct - 1QAZ1qaz) and write it down in your notebook as

well

6. click next

7. type again the same password as the last time - please remember this user ‘admin’ – as it will be used for access the management console later

8. please wait until the wizard completes the configuration

9. click finish to run the migration and deployment wizard -

Management Configuration – Migration And Deployment Wizard

1. click next

2. click next

3. type topaz and click next

4. at the following screen, make sure you check the right boxers as described here

5. again, follow the instruction, make sure the folder for the client installation is ‘D:\Program Files\Symantec\installation’ and click

next

6. click no and finish

7. wait for the wizard to complete configuration

8. Once it is finished, you can browse to the location ‘D:\Program Files\Symantec\installation\topaz_32-bit’ and find and setup (exe) file which can be installed manually on each machine (server or workstation).

9. Reboot the machine.

Management Configuration – Deploying Clients

Please make sure all Server and workstations are up and running and not in any standby/hibernate/off mode and are all pinging to the IPS server.

1. Start=>all programs=> Symantec endpoint protection manager => Migration and Deployment Wizard

2. next

3. next

4. click select an existing client packages to deploy and finish

5. a new windows should come – ‘Push deployment wizard’, browse to ‘D:\Program Files\Symantec\installation\topaz_32-bit’ and click

next

6. Now you have to search for all servers and computers and in the domain network.

7.8. Add each of the servers and workstations to the right window. If prompted,

enter user and password of the server/WS. Click finish9. status window will appear

10.once it is finish, click closed

Management Configuration – Management Console

The management console allows you to control and manages the clients. However, it is optional only, and it is not require for maintenance.To launch the management console login window go to start=>all programs=>Symantec endpoint protection manager=> Symantec Endpoint Protection Manager Console.

User: adminPassword – the password you have chosen during the installation

The management console screen:

Please note that in this console is not required for updating the virus definitions.

For adding clients and installing the clients from remote, click on the clients icon on the left:

At the bottom left side, you have a list of options, when one of them is ‘find unmanaged computers’. Click on it and it will launch a search window:

Please make sure all Server and workstations are up and running and not in any standby/hibernate/off mode and are all pinging to the IPS server.

In that window, you can define the following:

IP subnet on which you want to perform the search. User/password and domain name of the server

Click search and you should see the list of servers and workstations of your domain

To install the client setup on each of the clients, you may click on the install packages tab:

Click on add client install package:Make sure, under client Features section in the middle, that you have selected the ‘antiVirus, Antispyware and proactive threat scan’ as whoen here:

Please note that you can run the client setup, located at D:\Program Files\Symantec\installation\topaz_32-bit manually on each machine.

Management Configuration – updating Virus Definitions

In order to update the virus definitions in SEP, you just need to locate the definition file a specific location, and the SEP will deploy it automatically to all the clients which are configured. Example of that file is - vd29bc28.zip.

The definition file can be downloaded from the Symantec web site at the following link: http://www.symantec.com/avcenter/download/pages/US-SAVCE.html

After downloading the file, chgne the extension from .zip to .jdb

Once you have a Copy the *.jdb file to \Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\content\incoming folder (default install location).

Within 30 seconds to a minute the *.jdb file will process; all files and subfolders are removed from the incoming folder upon processing.