Endpoint Protection

 View Only
  • 1.  Script for automating SEP 12.1.2 client installation

    Posted Feb 20, 2013 02:22 PM

    I am looking for a a way to automate client installation of SEP 12.1.2, such as a script. Here's how the environment is configured...

    1. Single domain; multiple locations connected through WAN connections of various speeds

    2. All clients authenticate at the HQ, no other servers remotely

    3. All clients in the HQ installed thru remote push without any issues and are well managed thru SEPM, that is, updated and scanned per schedule

    Issues....

    When i try to push install to other areas in remote areas, the installation takes forever, I suspect that packets are lost on the way as when I do a ping there is a timeout, but the connection then returns, making the whole process to take forever and without any luck as it ultimately times out. As an alternative, i can copy the installation package to a remote location and script the installation, the main challenge being how to go about it. I would love to keep the installation simple but with adequate functionallity:

    -silent installation so that users dont zap it

    -use the likes of powershell, which i have not really used much except copying it somewhere

    -any other solution to meet the installation requirements.

    -AD and SCOM are possibilities but are likely to cause traffic congestion 

     



  • 2.  RE: Script for automating SEP 12.1.2 client installation

    Posted Feb 20, 2013 02:31 PM

    Have you seen the Push Deployment Wizard:

     

    Push Deployment Wizard - Standalone deployment app for SEP install packages

    Article:TECH195705  |  Created: 2012-08-27  |  Updated: 2012-10-11  |  Article URL http://www.symantec.com/docs/TECH195705

     

    You can copy to a file server at a remote site and push from there to conserve bandwidth. I use this all the time in combination with SEPPrep.

    Basically, you would create a silent install package in SEPM and point the tool at it. It will than copy to the target machine and being the install.



  • 3.  RE: Script for automating SEP 12.1.2 client installation

    Posted Feb 20, 2013 03:56 PM

    Came here to say this.

    You'll copy the tool and installation package to a computer local to the remote site. You can then push out the installation files from that remote computer to the destination computers.

    James



  • 4.  RE: Script for automating SEP 12.1.2 client installation

    Broadcom Employee
    Posted Feb 21, 2013 09:50 AM

    Hi,

    How to upgrade a client from a non-manager server using the "Download the client package from the following URL (http or https)" option.

    http://www.symantec.com/docs/TECH106181

    How to Auto-Upgrade Remote Site Clients using IIS

    http://www.symantec.com/docs/TECH97406

    I hope you are using GUP at remote sites to update the definitions.



  • 5.  RE: Script for automating SEP 12.1.2 client installation

    Posted Feb 22, 2013 12:21 AM

    I would suggest you to follow these steps

     

    Best practices when deploying Symantec Endpoint Protection client package over saturated 64k WAN links.

    http://www.symantec.com/business/support/index?page=content&id=TECH132352
     
    install without AV defs it will be only 40MB size
     
    then assign a client as GUP for your remote site so that the local client can get it from GUP
     
    What is GUP?
    http://www.symantec.com/business/support/index?page=content&id=TECH102541
     
    Or copy the package on to any of the remote site
    and then use clientremote.exe to push those. |Here is the document for that
     
    http://www.symantec.com/business/support/index?page=content&id=TECH103037