Symantec Endpoint Protection Installation and Administration Guide

Portugues Chinese (Simplified) Czech Deutsch Español Français Italian Japanese Korean Polish Russian Chinese (Traditional) English

Installing the Symantec Agent for Linux or the
Symantec Endpoint Protection
 client for Linux

(For 14.3 RU1 and later)
You install Symantec Agent for Linux directly on a Linux device. You cannot deploy the Linux agent from
Symantec Endpoint Protection Manager
 remotely.
To install Symantec Agent for Linux, create an installation package in
Symantec Endpoint Protection Manager
, transfer the installation package to a Linux device and then run the installer. The installer will configure the new agent and register it with
Symantec Endpoint Protection Manager
.
Symantec Agent for Linux 14.3 RU1 cannot run as an unmanaged client. All management tasks must be performed in
Symantec Endpoint Protection Manager
 or in cloud console.
(For 14.3 RU1 and later) To install the Symantec Management Agent for Linux:
  1. In
    Symantec Endpoint Protection Manager
    , create and download the installation package.
  2. Move the
    LinuxInstaller
     package to a Linux device.
  3. Make the
    LinuxInstaller
     file executable:
    chmod u+x LinuxInstaller
  4. Run the installer:
    ./LinuxInstaller
    You must run the command as root.
    To view the list of installation options, run
    ./LinuxInstaller -h
    .
  5. To verify the installation, navigate to
    /usr/lib/symantec
     and run
    ./status.sh
     to confirm that the modules are loaded and daemons are running:
    ./status.sh
    Symantec Agent for Linux Version: 14.3.450.1000
    Checking Symantec Agent for Linux (SEPM) status..
    Daemon status:
    cafagent             running
    sisamdagent          running
    sisidsagent          running
    sisipsagent          running
    Module status:
    sisevt               loaded
    sisap                loaded
    Note that
    communication status
     is only available for cloud-managed clients.
(For 14.3 MP1 and earlier)
You install an unmanaged or managed
Symantec Endpoint Protection
 client directly on a Linux computer. You cannot deploy the Linux client from
Symantec Endpoint Protection Manager
 remotely. The installation steps are similar whether the client is unmanaged or managed.
The only way to install a managed client is with an installation package that you create in
Symantec Endpoint Protection Manager
. You can convert an unmanaged client to a managed client at any time by importing client-server communication settings into the Linux client.
If the Linux operating system kernel is incompatible with the pre-compiled Auto-Protect kernel module, the installer tries to compile a compatible Auto-Protect kernel module. The auto-compile process automatically launches if it is needed. However, the installer might be unable to compile a compatible Auto-Protect kernel module. In this case, Auto-Protect installs but is disabled. For more information, see:
You must have superuser privileges to install the
Symantec Endpoint Protection
 client on the Linux computer. The procedure uses
sudo
 to demonstrate this elevation of privilege.
(For 14.3 MP1 and earlier) To install the
Symantec Endpoint Protection
 client for Linux:
  1. Copy the installation package that you created to the Linux computer. The package is a .zip file.
  2. On the Linux computer, open a terminal application window.
  3. Navigate to the installation directory with the following command:
    cd /
    directory
    /
    Where
    directory
    is the name of the directory into which you copied the .zip file.
  4. Extract the contents of the .zip file into a directory named
    tmp
     with the following command:
    unzip "
    InstallPackage
    " -d
    sepfiles
    Where
    InstallPackage
     is the full name of the .zip file, and
    sepfiles
     represents a destination folder into which the extraction process places the installation files.
    If the destination folder does not exist, the extraction process creates it.
  5. Navigate to
    sepfiles
     with the following command:
    cd
    sepfiles
  6. To correctly set the execute file permissions on
    install.sh
    , use the following command:
    chmod u+x install.sh
  7. Use the built-in script to install
    Symantec Endpoint Protection
     with the following command:
    sudo ./install.sh -i
    Enter your password if prompted.
    This script initiates the installation of the
    Symantec Endpoint Protection
     components. The default installation directory is as follows:
    /opt/Symantec/symantec_antivirus
    The default work directory for LiveUpdate is as follows:
    /opt/Symantec/LiveUpdate/tmp
    The installation completes when the command prompt returns. You do not have to restart the computer to complete the installation.
(For 14.3 MP1 and earlier) To verify the client installation, click or right-click the
Symantec Endpoint Protection
 yellow shield and then click
Open
Symantec Endpoint Protection
. The location of the yellow shield varies by Linux version. The client user interface displays information about program version, virus definitions, server connection status, and management.