Downloading content from LiveUpdate to the Symantec Endpoint Protection Manager
Symantec Endpoint Protection Manager
When you configure the management server to download LiveUpdate content, you have to make a number of decisions. When you download content to
Symantec Endpoint Protection Manager, you download the content for all the management servers in the site.
Decisions to make about downloading content
What LiveUpdate server should serve the content to the site?
You can specify either an external Symantec LiveUpdate server (recommended), or one or more internal LiveUpdate servers that have previously been installed and configured.
You should not install
Symantec Endpoint Protection Managerand an internal LiveUpdate server on the same physical hardware or virtual machine. Installation on the same computer can result in significant server performance problems.
If you decide to use one or more internal LiveUpdate servers, you may want to add the Symantec public LiveUpdate server as the last entry. If your clients cannot reach any server on the list, then they are still able to update from the Symantec LiveUpdate server.
To continue using an internal LiveUpdate server, you should upgrade to the latest version of LiveUpdate Administrator.
How many content revisions should the site store?
In version 12.1.6 and later, the management server stores only the most recent full content package, plus incremental deltas for as many revisions as you specify here. This approach reduces the disk space that is required to store multiple content revisions on the server.
The number of clients you select during the
Symantec Endpoint Protection Managerinstallation defines the number of revisions the server stores.
For each LiveUpdate content type, the default values are as follows:
For 12.1.6, or for upgrades to 14:
In most instances during an upgrade, the installation increases the number of revisions to match these new defaults. This increase occurs if the number of revisions you had before the upgrade is less than the new minimum default, based on the above criteria.
How often should my site check for LiveUpdate content updates?
The default schedule of having
Symantec Endpoint Protection Managerrun LiveUpdate every four hours is a best practice.
What operating systems am I downloading content to?
LiveUpdate only downloads the content for the specified operating systems.
What content types should I download to the site and to the clients?
Make sure that the site downloads all content updates that are specified in your client LiveUpdate Content policies.
What languages should be downloaded for product updates?
This setting applies to product updates only; the content updates are downloaded automatically for all languages.
What content size should be downloaded for definitions?
Version 14 standard and embedded/VDI clients use a reduced-size set of definitions (only the latest) that is cloud-enabled. Scans on these clients automatically use the extended definitions set in the cloud.
14 also includes a dark network client that downloads the entire set of definitions.
12.1.6.x embedded/VDI clients require legacy reduced-size content.
Your management server must download the correct content for the client types in your network. If the management server does not download the content that your installed clients require, the clients cannot get updates from the management server.
Should I test engine updates before they are released?
For large organizations, you should test the new engine updates and definitions before they are rolled out to all client computers. You want to test new engine updates with the minimal amount of disruption and downtime.
Downloading content from a LiveUpdate server to the
Symantec Endpoint Protection Manager
When you download content to a management server, you download it for all the management servers within the site.
- To configure a site to download content
- In the console, clickAdmin>Servers.
- UnderServers, right-clickLocal Site, and then clickEdit Site Properties.
- On theLiveUpdatetab, make choices from the following available options.
- UnderLiveUpdate Source Servers, clickEdit Source Serversand then inspect the current LiveUpdate server that is used to update the management server. This server is the Symantec LiveUpdate server by default. Then do one of the following:
If you selectedUse a specified internal LiveUpdate server, in theAdd LiveUpdate Serverdialog box, complete the boxes with the information that identifies the LiveUpdate server, and then clickOK.You can add more than one server for failover purposes. If one server goes offline, the other server provides support. You can also add the Symantec public LiveUpdate server as the last server in the list. If you add the public server, usehttp://liveupdate.symantecliveupdate.comas the URL.If you use a UNC server, then LiveUpdate requires that you use the domain or workgroup as part of the user name.If the computer is in a domain, use the formatdomain_name\user_name.If the computer is in a workgroup, use the formatcomputer_name\user_name.In theLiveUpdate Serversdialog box, clickOK.
- To use the existing LiveUpdate Source server, clickOK.
- To use an internal LiveUpdate server, clickUse a specified internal LiveUpdate serverand then clickAdd.
- UnderDisk Space Management for Downloads, type the number of LiveUpdate content revisions to keep.
- In theDownload Schedulegroup box, clickEdit Schedule, set the options for how often the server should check for updates. ClickOK.
- UnderPlatforms to Download, clickChange Platformsand then inspect the platforms list. Uncheck the platforms that you do not want to download content to.
- UnderContent Types to Download, inspect the list of update types that are downloaded.To add or delete an update type, clickChange Selection, modify the list, and then clickOK.The list should match the list of content types that you include in the LiveUpdate Content policy for your client computers.
- UnderContent to Download for Client Types, decide whether to download and store content for standard and embedded/VDI clients or dark network clients. You should also download and store reduced-size content or standard-size content if you run 12.1.x clients in your network.You must download content for the client types in your network. If you do not download the content that your installed clients require, the clients cannot get updates from the management server.To modify the setting, clickChange Selection, modify the selection, and then clickOK.
- UnderLanguages to Download, inspect the list of languages of the update types that are downloaded.To add or delete a language, clickChange Selection, modify the list, and then clickOK.
- ClickOKto save your selections and close the window.