Symantec Endpoint Protection Installation and Administration Guide

Portugues Chinese (Simplified) Czech Deutsch Español Français Italian Japanese Korean Polish Russian Chinese (Traditional) English

Installing the Symantec Linux Agent or the
Symantec Endpoint Protection
 client for Linux

(For 14.3 RU1 and later)
You install Symantec Linux Agent directly on a Linux device. You cannot deploy the Linux agent from
Symantec Endpoint Protection Manager
 remotely.
To install Symantec Linux Agent, create an installation package in
Symantec Endpoint Protection Manager
, transfer the installation package to a Linux device and then run the installer. The installer will configure the new agent and register it with
Symantec Endpoint Protection Manager
.
Symantec Linux Agent 14.3 RU1 and later cannot run as an unmanaged client. All management tasks must be performed in
Symantec Endpoint Protection Manager
 or in the cloud console.
For 14.3 RU1 and later: To install the Symantec Linux Agent
  1. In
    Symantec Endpoint Protection Manager
    , create and download the installation package.
  2. Put the package on a network share, USB device, or other share mechanism.
    If the devices where you want to install the Linux agent are in an isolated network or do not have Internet access, configure a local repository. See:
  3. Install the Linux agent in one of the following ways:
    If you transferred the package to the Linux device
    1. Navigate to folder location and run the following command to make the
      LinuxInstaller
       file executable:
      chmod u+x LinuxInstaller
    2. Run the following command to install the agent:
      ./LinuxInstaller
    If you configured a local repository
    1. Run the following command:
      ./LinuxInstaller – --local-repo <LOCAL Repository URL>
      For example:
      ./LinuxInstaller – --local-repo https://your-domain.com/sep_linux_agent/14_3RU3
    You must run the command as root.
    To view the list of installation options, run
    ./LinuxInstaller -h
    .
  4. To verify the installation, navigate to
    /usr/lib/symantec
     and run
    ./status.sh
     to confirm that the modules are loaded and daemons are running:
    ./status.sh
    Symantec Agent for Linux Version: 14.3.450.1000
    Checking Symantec Agent for Linux (SEPM) status..
    Daemon status:
    cafagent             running
    sisamdagent          running
    sisidsagent          running
    sisipsagent          running
    Module status:
    sisevt               loaded
    sisap                loaded
    Note that
    communication status
     is only available for cloud-managed clients.
For 14.3 MP1 and earlier
You install an unmanaged or managed
Symantec Endpoint Protection
 client directly on a Linux computer. You cannot deploy the Linux client from
Symantec Endpoint Protection Manager
 remotely. The installation steps are similar whether the client is unmanaged or managed.
The only way to install a managed client is with an installation package that you create in
Symantec Endpoint Protection Manager
. You can convert an unmanaged client to a managed client at any time by importing client-server communication settings into the Linux client.
If the Linux operating system kernel is incompatible with the pre-compiled Auto-Protect kernel module, the installer tries to compile a compatible Auto-Protect kernel module. The auto-compile process automatically launches if it is needed. However, the installer might be unable to compile a compatible Auto-Protect kernel module. In this case, Auto-Protect installs but is disabled. For more information, see:
You must have superuser privileges to install the
Symantec Endpoint Protection
 client on the Linux computer. The procedure uses
sudo
 to demonstrate this elevation of privilege.
For 14.3 MP1 and earlier: To install the
Symantec Endpoint Protection
 client for Linux
  1. Copy the installation package that you created to the Linux computer. The package is a .zip file.
  2. On the Linux computer, open a terminal application window.
  3. Navigate to the installation directory with the following command:
    cd /
    directory
    /
    Where
    directory
    is the name of the directory into which you copied the .zip file.
  4. Extract the contents of the .zip file into a directory named
    tmp
     with the following command:
    unzip "
    InstallPackage
    " -d
    sepfiles
    Where
    InstallPackage
     is the full name of the .zip file, and
    sepfiles
     represents a destination folder into which the extraction process places the installation files.
    If the destination folder does not exist, the extraction process creates it.
  5. Navigate to
    sepfiles
     with the following command:
    cd
    sepfiles
  6. To correctly set the execute file permissions on
    install.sh
    , use the following command:
    chmod u+x install.sh
  7. Use the built-in script to install
    Symantec Endpoint Protection
     with the following command:
    sudo ./install.sh -i
    Enter your password if prompted.
    This script initiates the installation of the
    Symantec Endpoint Protection
     components. The default installation directory is as follows:
    /opt/Symantec/symantec_antivirus
    The default work directory for LiveUpdate is as follows:
    /opt/Symantec/LiveUpdate/tmp
    The installation completes when the command prompt returns. You do not have to restart the computer to complete the installation.
For 14.3 MP1 and earlier
To verify the client installation, click or right-click the
Symantec Endpoint Protection
 yellow shield and then click
Open
Symantec Endpoint Protection
. The location of the yellow shield varies by Linux version. The client user interface displays information about program version, virus definitions, server connection status, and management.
More information