Administration Guide for Symantec Endpoint Protection and ...

1 AdministrationGuideforSymantec EndpointProtectionand SymantecNetworkAccessControlAdminstratio nGuideforSymantecEndpointProtectionandSy mantecNetworkAccessControlThesoftwaredes cribedinthisbookis furnishedundera ,theSymantecLogo,Bloodhound,ConfidenceOn line,DigitalImmuneSystem,LiveUpdate,Nort on,Sygate, ( ThirdPartyPrograms ). ,copying,distribution, ,if "ASIS"ANDALLEXPRESSORIMPLIEDCONDITIONS,R EPRESENTATIONSANDWARRANTIES,INCLUDINGANY IMPLIEDWARRANTYOFMERCHANTABILITY,FITNESS FORA PARTICULARPURPOSEORNON-INFRINGEMENT,ARED ISCLAIMED, ,PERFORMANCE, "CommercialComputerSoftware- RestrictedRights" ,"RightsinCommercialComputerSoftwareorCo mmercialComputerSoftwareDocumentation",a sapplicable, ,modification,reproductionrelease,perfor mance, ,CA94043 , smaintenanceofferingsincludethefollowing .

2 A rangeofsupportoptionsthatgiveyoutheflexi bilitytoselecttherightamountofservicefor anysizeorganization TelephoneandWeb-basedsupportthatprovides rapidresponseandup-to-the-minuteinformat ion Upgradeassurancethatdeliversautomaticsof twareupgradeprotection Globalsupportthatisavailable24hoursa day,7 daysa week Advancedfeatures,includingAccountManagem entServicesForinformationaboutSymantec sMaintenancePrograms, , ,youshouldbeatthecomputeronwhichtheprobl emoccurred,incaseit is ,pleasehavethefollowinginformationavaila ble: Productreleaselevel Hardwareinformation Availablememory,diskspace,andNICinformat ion Operatingsystem Versionandpatchlevel Networktopology Router,gateway,andIPaddressinformation Problemdescription: Errormessagesandlogfiles Troubleshootingthatwasperformedbeforecon tactingSymantec Recentsoftwareconfigurationchangesandnet workchangesLicensingandregistrationIf yourSymantecproductrequiresregistrationo ra licensekey.

3 Questionsregardingproductlicensingorseri alization Productregistrationupdates,suchasaddress ornamechanges Generalproductinformation(features,langu ageavailability,localdealers) Latestinformationaboutproductupdatesandu pgrades Informationaboutupgradeassuranceandmaint enancecontracts InformationabouttheSymantecBuyingProgram s AdviceaboutSymantec'stechnicalsupportopt ions Nontechnicalpresalesquestions comprehensivesetofservicesthatallowyouto maximizeyourinvestmentinSymantecproducts andtodevelopyourknowledge,expertise,andg lobalinsight, :Thesesolutionsprovideearlywarningofcybe rattacks,comprehensivethreatanalysis, , varietyofprepackagedandcustomizableoptio nsthatincludeassessment,design,implement ation,monitoring, fullarrayoftechnicaltraining,securityedu cation,securitycertification.

4 4 Section1 Basicadministrativetasks.. 25 Chapter1 IntroducingSymantecEndpointProtection.. 27 AboutSymantecEndpointProtection.. 27 ComponentsofSymantecEndpointProtectionan dSymantecNetworkAccessControl.. 28 KeyfeaturesofSymantecEndpointProtectiona ndSymantecNetworkAccessControl.. 30 Aboutthetypesofprotection.. 32 Chapter2 Startingthe SymantecEndpointProtectionManagerconsole .. 35 LoggingontotheSymantecEndpointProtection Managerconsole.. 35 Whatyoucandofromtheconsole.. 37 Chapter3 Managinggroupsand clients.. 41 Managingcomputergroups.. 42 Howyoucanstructuregroups.. 43 Addinga group.

5 45 Importinganexistingorganizationalstructu re.. 45 Renaminga group.. 47 Movinga group.. 47 Viewinga group'sproperties.. 48 Disablingandenablinga group'sinheritance.. 48 Settingupandmanagingclientsingroups.. 49 Aboutusermodeandcomputermode.. 51 Preassigningcomputersoruserstogroupsbefo reyouinstalltheclientsoftware.. 52 Aboutgroupsspecifiedintheclientinstallat ionpackage.. 53 Switchinga clientbetweenusermodeandcomputermode.. 54 Convertinganunmanagedclienttoa managedclient.. 54 ContentsBlockingclientsfrombeingaddedtog roups.. 56 Movingclientsbetweengroups.. 57 Viewingthestatusofclientsandclientcomput ers.

6 57 Restartingclientcomputers.. 59 Viewinga client'sproperties.. 59 ChangingtheinformationthatdisplaysontheC lientstab.. 60 Searchingforinformationaboutclients.. 61 Configuringa clienttodetectunknowndevices.. 62 Runningcommandsonclientsfromtheconsole.. 63 Chapter4 Managinga group'slocations.. 65 Usinglocationawarenesswithgroups.. 65 Aboutplanninglocations.. 68 Enablinglocationawarenessfora client.. 69 Addinga locationwitha wizard.. 70 Addinga locationwithouta wizard.. 71 Changinga defaultlocation.. 72 Editingthenameanddescriptionofa group'slocation.. 73 Deletinga group'slocation.

7 74 Chapter5 Workingwith policies.. 75 Usingpoliciestomanageyournetworksecurity .. 76 Aboutsharedandnon-sharedpolicies.. 79 Aboutaddingpolicies.. 80 Addinga sharedpolicy.. 80 Addinga non-sharedpolicyintheClientspagewithawiz ard.. 81 Addinga newnon-sharedpolicyintheClientspage.. 82 Addinga newnon-sharedpolicyfromanexistingpolicyi ntheClientspage.. 83 Addinga newnon-sharedpolicyfroma previouslyexportedpolicyfileintheClients page.. 84 Editinga policy.. 84 Assigninga sharedpolicy.. 85 Withdrawinga policy.. 86 Deletinga policy.. 87 Exportinga policy.. 88 Importinga policy.. 89 Aboutcopyingpolicies.

8 90 Copyinga sharedpolicyinthePolicypage.. 90 Copyinga sharedornon-sharedpolicyintheClientspage .. 91 Pastinga policy.. 91 Contents8 Copyingandpastinga grouppolicy.. 92 Replacinga policy.. 92 Convertinga sharedpolicytoa non-sharedpolicy.. 94 Convertinga copyofa sharedpolicytoa non-sharedpolicy.. 94 Aboutupdatingpoliciesontheclients.. 95 Configuringpushmodeorpullmodetoupdatecli entpoliciesandcontent.. 96 Viewingthepolicyserialnumber.. 97 Performinga manualpolicyupdatetocheckthepolicyserial number.. 98 Monitoringtheapplicationsandservicesthat runonclientcomputers.. 99 Configuringthemanagementservertocollecti nformationabouttheapplicationsthatthecli entcomputersrun.

9 100 Searchingforinformationabouttheapplicati onsthatthecomputersrun.. 102 Savingtheresultsofanapplicationsearch.. 104 Chapter6 Workingwith clientinstallationpackages.. 105 Usingclientinstallationpackages.. 105 Configuringclientinstallationpackageopti ons.. 107 Configuringclientinstallationpackagefeat ures.. 107 Configuringclientinstallationpackagesett ings.. 108 Collectinguserinformation.. 108 Exportingclientinstallationpackages.. 109 DeployingclientsoftwarewithFindUnmanaged Computers.. 111 Aboutaddingclientinstallationpackageupda tesandupgradingclients.. 112 Addingclientinstallationpackageupdates.

10 112 Upgradingclientsinoneormoregroups.. 113 Deletingupgradepackages.. 114 Chapter7 Updatingdefinitionsand content.. 115 Managingcontentforclients.. 116 Aboutthetypesofcontent.. 117 Determininghowclientsgetcontent.. 118 Configuringa sitetodownloadcontentupdates.. 122 Aboutsimultaneouscontentdownloads.. 124 AboutLiveUpdatePolicies.. 125 Aboutusingthecontentrevisionsthatarenott helatestversion.. 125 Configuringa LiveUpdateSettingsPolicy.. 126 Configuringa LiveUpdateContentPolicy.. 1279 ContentsViewingandchangingtheLiveUpdateC ontentPolicyquickly.. 129 DistributingcontentusingGroupUpdateProvi ders.