Guide Symantec Endpoint Protection Installation and ...

1 Symantec Endpoint Protection Installation and AdministrationGuide December 2020 RU1 Table of ContentsRelease 's new for Symantec Endpoint Protection RU2?..27 System requirements for Symantec Endpoint Protection (SEP) issues and workarounds for Symantec Endpoint Protection (SEP)..38 Supported virtual installations and virtualization Endpoint Protection release types and to get more 's new for all releases of Symantec Endpoint Protection (SEP) 's new for Symantec Endpoint Protection RU1 's new for Symantec Endpoint Protection RU1?..58 What's new for Symantec Endpoint Protection MP1 ( )..63 What's new for Symantec Endpoint Protection 64 What is Symantec Endpoint Protection ?..66 How Symantec Endpoint Protection technologies protect your Endpoint Protection architecture 71 Symantec Endpoint Protection Quick Start Symantec Endpoint Protection Symantec Endpoint Protection Manager after 80 Installing Symantec Endpoint Protection Manager with a custom on to the Symantec Endpoint Protection Manager or importing your Symantec Endpoint Protection product 86 Purchasing Symantec Endpoint Protection Symantec Endpoint Protection clients with Save the Symantec Endpoint Protection client for authorizing system extensions for Symantec Endpoint Protection for macOS or 92 Managing kernel extension authorization when deploying the Symantec Endpoint Protection client the Symantec Agent for Linux or the Symantec Endpoint Protection client for 93 Getting started on the Linux auto-compile for the Symantec Endpoint Protection client for 96 About the Linux client graphical user Symantec Endpoint

2 Protection clients with Remote Symantec Endpoint Protection clients with Web Link and do I do after I install the management server?.. 101 Communication ports for Symantec Endpoint 103 2 Installing and Uninstalling the Management Server and architecture choosing a database basic management server 107 About SQL Server configuration SQL Server database authentication Symantec Endpoint Protection the Symantec Endpoint Protection client Windows and Mac computers for remote 114 Choosing a method to install the client using the Client Deployment which security features to install on the 117 Managing client Installation 117 Exporting client Installation client Installation packages into Symantec Endpoint Protection 119 Windows client Installation package and content update custom Windows client Installation packages in Symantec Endpoint Protection the Windows client Installation the client Installation existing security whether to download cloud-based or local-based definitions using the client Installation 124 Third-party security

3 Software removal in Endpoint Protection security software removal in Symantec Endpoint Protection RU1 and 125 Restarting the client computers from Symantec Endpoint Protection managed and unmanaged to get an unmanaged client Installation an unmanaged Windows 130 About uninstalling the Symantec Endpoint Protection 131 Uninstalling the Symantec Endpoint Protection client for 132 Uninstalling the Symantec Endpoint Protection client for the Symantec Agent for Linux or the Symantec Endpoint Protection client for 133 Upgrading and Migrating to the Latest Release of Symantec Endpoint Protection (SEP).. 135 Upgrade best practices for Endpoint Protection 136 Supported and unsupported upgrade paths to the latest version of Symantec Endpoint Protection ..140 Increasing Symantec Endpoint Protection Manager available disk space before an a management practices for upgrading from the embedded database to the Microsoft SQL Server Express 143 Reducing the database size when the database is full before an upgrade to Microsoft SQL Server 145 Enabling FILESTREAM for the Microsoft SQL Server 3 Reducing the database size to less than 10 GB before an upgrade to Microsoft SQL Server more disk space available to upgrade to the default Microsoft SQL Server Express encrypted communication between Symantec Endpoint Protection Manager and Microsoft an environment that uses multiple embedded databases and management and starting the management server 158 Preventing replication during an 159 Restoring which method to upgrade the client 160 Upgrading client software with AutoUpgrade settings to other Symantec Endpoint Protection RU2+ to a supported Endpoint Protection

4 Client patches on Windows the Symantec Linux the kernel modules for the Symantec Linux Group Update 168 Upgrade resources for Symantec Endpoint Symantec Endpoint the license status in Symantec Endpoint Protection up and recovering your license file (.slf)..171 Purging obsolete clients from the database to make more licenses does a Symantec Endpoint Protection license cover?..172 About multi-year 173 Symantec Endpoint Protection product license an unmanaged Windows 174 Managing the client-server management servers and the server-client up HTTPS communications between a Symantec Endpoint Protection Manager and the port 176 Changing the HTTPS port for Apache for client 176 Enabling HTTPS client-server 177 Improving client and server 179 About server 180 Best practices for updating server certificates and maintaining the client-server the server certificate on the management server without breaking communications with the 182 Updating or restoring a server Symantec Endpoint Protection Manager after changing the computer's IP address and whether the client is connected to the management server and is 186 Symantec Endpoint Protection client status 4 Using the policy serial number to check client-server policies and content on the client using push mode or pull does the client

5 Computer and the management server communicate?..190 How do I replace the client-server communications file on the client computer?..192 Restoring client-server communications with Communication Update Package the client-server communications file ( ) client-server communication settings into the Windows client-server communication settings into the Linux 195 IPv6 networking Groups, Clients, Administrators, and groups of you can structure a existing groups and computers from an Active Directory or an LDAP 199 About importing organizational units from the directory Symantec Endpoint Protection Manager to a directory to a directory server on a replicated 201 Importing organizational units from a directory a group's client computers from being added to 203 Moving a client computer to another client the Protection status of client Protection on the client for the clients that do not have the client software 206 Searching for information about client are the commands that you can run on client computers?

6 207 Running commands on client computers from the 209 Ensuring that a client does not 210 Switching a Windows client between user mode and computer a client to detect unmanaged 211 Password-protecting the Symantec Endpoint Protection and allowing users to change the client's user 213 Collecting user 214 Checking on your Mac client using AppleScript 215 Managing your Linux client using the command line tool (sav).. 216 Managing remote locations for remote location awareness for a a location to a 221 5 Changing a default up Scenario One location awareness up Scenario Two location awareness 224 Configuring communication settings for a strengthening your security policies for remote practices for Firewall policy settings for remote 226 About turning on notifications for remote monitoring remote clients from the management 227 Monitoring roaming Symantec Endpoint Protection clients from the cloud administrator administrator accounts and access an administrator account and setting access the authentication method for administrator 232 Using RSA SecurID authentication with Symantec Endpoint Protection 233 Configuring two-factor authentication with Symantec Symantec Endpoint Protection Manager to authenticate administrators who log on with directory server authentication for an administrator 237 Changing the

7 Password for an administrator account or the default a forgotten Symantec Endpoint Protection Manager the Forgot your password? link so that administrators can reset lost 242 Enabling Symantec Endpoint Protection Manager logon passwords to never 242 Displaying a message for administrators to see before logging on to the Symantec Endpoint Protection 243 Displaying the Remember my user name and Remember my password check boxes on the logon or blocking access to remote Symantec Endpoint Protection Manager 244 Unlocking an administrator's account after too many logon the timeout period for staying logged on to the Symantec Endpoint Protection Manager 246 Adding a to the current Policies to Manage the tasks that are common to all 249 The types of security 250 Updating client 252 Adding a a a policy's default and pasting a policy on the Policies and pasting a policy on the Clients 6 Assigning a policy to a group or a and importing individual Endpoint Protection shared and non-shared a shared policy to a non-shared a

8 Policy from a group or users from disabling Protection on client the applications and services that run on client application for information about the learned applications that the computers firewall 265 How a firewall the Symantec Endpoint Protection 266 About firewall settings for the Mac a firewall firewall 270 Adding a new firewall 271 About firewall server rules and client 272 About the firewall rule, firewall setting, and intrusion prevention processing inherited firewall 274 Changing the order of firewall 275 How the firewall uses stateful 276 About firewall rule application 276 About firewall rule host host firewall rule network services network services to the default network services firewall rule network adapter a custom network adapter to the network adapter and exporting firewall 283 Importing or exporting firewall rules on the 284 Customizing firewall firewall settings for mixed communications for network services instead of adding a blocking connections to an attacking 293 Detecting potential attacks and spoofing outside stealth attacks on the Windows intrusion intrusion prevention 7 About Symantec IPS custom IPS 299 Creating exceptions for IPS up a list of excluded network intrusion prevention or browser intrusion browser extensions with Symantec Endpoint Protection to protect against

9 Malicious client notifications for intrusion prevention and Memory Exploit custom intrusion prevention 308 Creating a custom IPS 309 Adding signatures to a custom IPS the order of custom IPS variables for custom IPS 312 Assigning multiple custom IPS libraries to a custom IPS 313 Hardening Windows clients against memory tampering attacks with a Memory Exploit Mitigation Endpoint Protection Memory Exploit Mitigation mitigation and Protection with Symantec Endpoint Protection using Symantec Endpoint and handling virus and spyware attacks on client 324 Removing viruses and security the infected and at-risk the scan action and rescanning the identified Windows clients receive definitions from the 328 Managing scans on client the types of scans and real-time the types of 333 About virus and security 335 About the files and folders that Symantec Endpoint Protection excludes from virus and spyware 336 About the default Virus and Spyware Protection policy scan 338 How Symantec Endpoint Protection handles detections of viruses and security Symantec Endpoint Protection handles detections on Windows 8 341 Setting up scheduled scans that run on Windows 342 Setting up scheduled scans that run on Mac up scheduled scans that run on Linux 344 Running on-demand scans on client 345 Adjusting scans to improve computer 345 Adjusting scans to increase Protection on your client 347 Managing Download Insight Symantec Endpoint Protection uses Symantec Insight to make decisions about does Symantec Endpoint Protection use advanced machine learning?

10 352 8 How does the emulator in Symantec Endpoint Protection detect and clean malware?.. 354 Managing the quarantine for Windows 355 Managing the virus and spyware notifications that appear on client the pop-up notifications that appear on Windows 8 358 Enabling or disabling Symantec Endpoint Protection pop-up notifications that appear on Windows 8 358 Managing early launch anti-malware (ELAM) the Symantec Endpoint Protection early launch anti-malware (ELAM) a site to use a private Insight server for reputation client groups to use private servers for reputation queries and 361 Customizing virus and spyware the virus and spyware scans that run on Mac the virus and spyware scans that run on Linux 364 Customizing Auto-Protect for Windows Auto-Protect for Mac Auto-Protect for Linux Auto-Protect for email scans on Windows administrator-defined scans for clients that run on Windows administrator-defined scans for clients that run on Mac 370 Customizing administrator-defined scans for clients that run on Linux 370 Randomizing scans to improve computer performance in virtualized environments on Windows 371 Modifying global scan log handling and notification settings on Windows 373 Modifying log handling settings on Linux Download Insight the action that Symantec Endpoint Protection takes when it makes a users to view scan progress and interact with scans on