thinkgaq.blogg.se - Symantec endpoint protection 14 installation guide

If Upgrade Schedule is not selected, then clients will receive the instructions to change their installation when they check in with the manager.Below that, select the feature set needed from the drop down menu.

Uncheck Maintain existing client features when updating.Both packages can be separately assigned to the same group. In that screen, select the correct package in the drop-down menu for use with this group (32 bit or 64 bit base install files).Under Tasks, choose Add Client Install Package.Select the group with the SEP clients in it, and then click the Install Packages tab in the right pane.Select the features needed: Antivirus/Antispyware, Network Threat Protection, Proactive Threat Protection.If a feature set that meets the required needs does not exist, then choose Add Client Install Feature Set.Click Client Install Feature Set on the top.

Configure your default domain and any Advanced Event Source Settings.For managed clients, the installation features can be modified for an entire group through the Symantec Enpoint Protection Manager (SEPM) (enterprise edition only).

Optionally choose to send unfiltered logs.

Choose the timezone that matches the location of your event source logs.

You can name your event source if you want.

Select your collector and event source.

From the "Security Data" section, select the Virus Scan icon.

At the top right of the page, select the dropdown that says "Setup Event Source" and then choose Add Event Source.

From your dashboard, select** Data Collection** on the left hand menu.

This option will log data to a single log folder instead of sending the logs to syslog. When configuring Symantec for syslog delivery, check off Export Logs to a Dump File. In the SEP Management Console, you must configure Symantec to send logs to a folder in the "External Logging settings" section. Read instructions on page 705 of the Administrator's Guide here: Watch Directory

In the SEP Management Console, you must configure Symantec to send logs via syslog in the "External Logging settings" section. InsightIDR can ingest data from Symantec Endpoint Protection in two ways: syslog and Watch Directory. Symantec Endpoint Protection (SEP) utilizes the endpoints on your network to work together in protecting data.