Installing the Symantec Linux Agent or the
Symantec Endpoint Protection
client for Linux

(For 14.3 RU1 and later)
You install Symantec Linux Agent directly on a Linux device. You cannot deploy the Linux agent from
Symantec Endpoint Protection Manager
To install Symantec Linux Agent, create an installation package in
Symantec Endpoint Protection Manager
, transfer the installation package to a Linux device and then run the installer. The installer will configure the new agent and register it with
Symantec Endpoint Protection Manager
Symantec Linux Agent 14.3 RU1 and later cannot run as an unmanaged client. All management tasks must be performed in
Symantec Endpoint Protection Manager
or in the cloud console.
For 14.3 RU1 and later: To install the Symantec Linux Agent
  1. In
    Symantec Endpoint Protection Manager
    , create and download the installation package.
  2. Put the package on a network share, USB device, or other share mechanism.
    If the devices where you want to install the Linux agent are in an isolated network or do not have Internet access, configure a local repository. See:
  3. Install the Linux agent in one of the following ways:
    If you transferred the package to the Linux device
    1. Navigate to folder location and run the following command to make the
      file executable:
      chmod u+x LinuxInstaller
    2. Run the following command to install the agent:
    If you configured a local repository
    1. Run the following command:
      ./LinuxInstaller – --local-repo <LOCAL Repository URL>
      For example:
      ./LinuxInstaller – --local-repo
    You must run the command as root.
    To view the list of installation options, run
    ./LinuxInstaller -h
  4. To verify the installation, navigate to
    and run
    to confirm that the modules are loaded and daemons are running:
    Symantec Agent for Linux Version: 14.3.450.1000
    Checking Symantec Agent for Linux (SEPM) status..
    Daemon status:
    cafagent             running
    sisamdagent          running
    sisidsagent          running
    sisipsagent          running
    Module status:
    sisevt               loaded
    sisap                loaded
    Note that
    communication status
    is only available for cloud-managed clients.
For 14.3 MP1 and earlier
You install an unmanaged or managed
Symantec Endpoint Protection
client directly on a Linux computer. You cannot deploy the Linux client from
Symantec Endpoint Protection Manager
remotely. The installation steps are similar whether the client is unmanaged or managed.
The only way to install a managed client is with an installation package that you create in
Symantec Endpoint Protection Manager
. You can convert an unmanaged client to a managed client at any time by importing client-server communication settings into the Linux client.
If the Linux operating system kernel is incompatible with the pre-compiled Auto-Protect kernel module, the installer tries to compile a compatible Auto-Protect kernel module. The auto-compile process automatically launches if it is needed. However, the installer might be unable to compile a compatible Auto-Protect kernel module. In this case, Auto-Protect installs but is disabled. For more information, see:
You must have superuser privileges to install the
Symantec Endpoint Protection
client on the Linux computer. The procedure uses
to demonstrate this elevation of privilege.
For 14.3 MP1 and earlier: To install the
Symantec Endpoint Protection
client for Linux
  1. Copy the installation package that you created to the Linux computer. The package is a .zip file.
  2. On the Linux computer, open a terminal application window.
  3. Navigate to the installation directory with the following command:
    cd /
    is the name of the directory into which you copied the .zip file.
  4. Extract the contents of the .zip file into a directory named
    with the following command:
    unzip "
    " -d
    is the full name of the .zip file, and
    represents a destination folder into which the extraction process places the installation files.
    If the destination folder does not exist, the extraction process creates it.
  5. Navigate to
    with the following command:
  6. To correctly set the execute file permissions on
    , use the following command:
    chmod u+x
  7. Use the built-in script to install
    Symantec Endpoint Protection
    with the following command:
    sudo ./ -i
    Enter your password if prompted.
    This script initiates the installation of the
    Symantec Endpoint Protection
    components. The default installation directory is as follows:
    The default work directory for LiveUpdate is as follows:
    The installation completes when the command prompt returns. You do not have to restart the computer to complete the installation.
For 14.3 MP1 and earlier
To verify the client installation, click or right-click the
Symantec Endpoint Protection
yellow shield and then click
Symantec Endpoint Protection
. The location of the yellow shield varies by Linux version. The client user interface displays information about program version, virus definitions, server connection status, and management.
More information