Symantec Endpoint Protection 14.x Quick Start Guide
This guide helps you download, install, and configure
Symantec Endpoint Protection
, and is designed for default, first-time managed installations of 500 clients or fewer. Preinstall: Check system requirements
Before you install
Symantec Endpoint Protection Manager
or the Symantec Endpoint Protection
clients, perform the following steps: - Download SymDiag and run the preinstall check to ensure the computer(s) meet system requirements.
Step 1: Download the
Symantec Endpoint Protection
installation fileYou download the latest version of Symantec software and tools, retrieve license keys, and activate your product through the Broadcom Support Portal. See:
- Symantec Getting Started and scroll down toOn-Premises Security Products.
Step 2: Install the Symantec Endpoint Protection Manager
If you cannot find or otherwise download your Symantec software through the Broadcom Support Portal, contact Customer Care for assistance.
- In the folder where you downloaded theSymantec Endpoint Protectioninstallation file, double-click the file to extract all files. If you see anOpen File - Security Warningprompt, clickRun.
- Do one of the following actions, depending on the version of your installation:
- For versions 14.2 MP1a (14.2.1023.0100) or later,the file extracts to C:\Users\username\AppData\Local\Temp\7zXXXXXXXXX, whereXXXXXXXXXrepresents a random string of letters and numbers. Setup.exe automatically launches. Leave the installation menu open until the installation completes. Closing the menu deletes all of the files in the temporary directory.To save the installation files, navigate to the previously described temp folder and copy its contents to a location that you select. The installation files include the Tools directory.
- For versions earlier than 14.2 MP1a (14.2.1023.0100), type or browse to a location to extract to, and then clickExtract. When the extraction finishes, find and double-clickSetup.exe.
- ClickInstall.Symantec Endpoint Protection
- Continue with the installation by accepting the terms in the license agreement, along with all default prompts, and then clickInstall.
- On theWelcome to the Management Server Configuration Wizardpanel, clickDefault configuration, and then clickNext.For a customized installation, such as using a SQL Server database, clickCustom configuration.
- Fill out the required fields to create the system administrator account and email address to whichSymantec Endpoint Protection Managersends notifications, and then clickNext.You must configure the mail server to receive notification and password reset emails from the management server. You can also enter specified mail server information, and then clickSend Test Email. You must verify that you received the test email before you can continue.
- Choose the following options, and then clickNext:
- Whether or not you want to run LiveUpdate after the installation finishes. Symantec recommends that you run LiveUpdate during installation. (14.3 MPx and earlier)
- Whether or not Symantec collects data from the clients.
- Partner information, if it applies to your licensing situation.
This step may take some time to finish. - On theConfiguration completedpanel, clickFinishto launchSymantec Endpoint Protection Manager.
- On theSymantec Endpoint Protection Managerlogon screen, type the user name and password you created in step 6 and confirm that you can log on.Your user name isadminby default.
Although you should not need a SQL Server database for an environment with 500 or fewer clients, you can review the following article for more information: Installing Symantec Endpoint Protection Manager with a custom configuration
In 14.1 and later, you have the option to enroll Symantec Endpoint Protection Manager with the Symantec Endpoint Protection cloud console. You can enroll the Symantec Endpoint Protection Manager domain any time after installation completes. See: Enrolling a domain in the cloud console from the Symantec Endpoint Protection Manager console
Step 3: Activate your license and add a group
After you log on to Symantec Endpoint Protection Manager, the
Getting Started
screen appears with multiple links to common tasks. For example, you can activate your license or deploy Symantec Endpoint Protection clients.To open this screen at any time, click
Help
> Getting Started Page
in the top right-hand corner of Symantec Endpoint Protection Manager. For video tours of other common tasks within Symantec Endpoint Protection Manager, click Product Tour
.To activate your product license:
- In theGetting Startedscreen, underLicense Status, clickActivate your product.
- Using your serial number or the .SLF license file that your order fulfillment email contains, follow the prompts to install your license.
To add a group for clients:
Symantec recommends that you create separate groups for desktops, laptops, and servers.
- In the Symantec Endpoint Protection Manager, in the left pane, clickClients.
- UnderClients, clickMy Company.
- UnderTasks, clickAdd a group.
- In theAdd Group for My Companydialog box, type the group name and a description, and then clickOK.
You can then further configure the group settings, such as policy inheritance.

Step 4: Install the Symantec Endpoint Protection clients
Before you install the clients by using Symantec Endpoint Protection Manager, check the following items:
- Make sure that the computers can be accessed through the network.
- Make sure that you have administrator credentials for the computers to which you want to deploy.
For unmanaged client installations, see: Installing an unmanaged Windows client
- InSymantec Endpoint Protection Manager, in the left pane, clickClients.
- UnderClients, select the group you created previously.
- UnderTasks, clickInstall a client.
- In theWelcome to the Client Deployment Wizardpanel, clickNew Package Deployment, and then clickNext.
- In theInstall Packagesdrop-down list, select the operating system that matches the operating system of the client computers.
- Choose the following options depending on the operating system you selected in the previous step.
- Windows install package:
- In theInstall Feature Setsdrop-down list, keep the default setting ofFull Protection for Clients.
- In theInstall Settingsdrop-down list, keep the default setting ofDefault Standard client installation settings for Windows.These default settings require a restart. To change the restart settings, you need to add a custom client package first. After you add the client package, clickOptionsto select the custom package. See: Creating custom client installation packages in Symantec Endpoint Protection Manager.
- Choose whether to include virus definitions next toContent Options, and then clickNext.
- Mac install package:Keep the default setting forUpgrade settings, and then clickNext.
- Linux install package:ClickNext. Linux packages are limited to theWeb Link and EmailorSave Packagedeployment method.
- ClickRemote Push, and then clickNext.
- On theBrowse Networktab, browse to your workgroup or domain and select the computers you want to push theSymantec Endpoint Protectionclient to. After you select the computers, click the>>option to add them to the right pane.
- After you add the desired computers, clickNext.
- ClickSendto initiate the process.After the push installation has finished, you see aDeployment Summarywindow with the results of the push.
- ClickNext, and then clickFinishto exit the wizard.This window indicates that the install files were successfully copied.
- To confirm that the client was successfully installed, check that the client exists in the client group that you added in theClientspane.
Step 5: Check that the latest definitions are installed
- InSymantec Endpoint Protection Manager, in the left pane, clickHome.
- In theEndpoint Statusbox, underWindows Definitions, compare the dates forLatest on ManagerandLatest from Symantec.
- If the dates do not match, clickHelp>Getting Started Page, clickRun LiveUpdate now, and then clickDownload.
Step 6: Check the database backup settings
- InSymantec Endpoint Protection Manager, in the left pane, clickAdmin>Servers.
- UnderServers, clickLocal Site (My Site)>SQLEXPRESSSYMC.For 14.3 MPx and earlier, clicklocalhost.
- UnderTasks, clickEdit Database Properties.
- On theBackup Settingstab, make any necessary adjustments and then clickOK.By default, a backup is saved once a week.
Appendix A: Additional resources and guides