Thursday 8 December 2011

Symantec Endpoint Protection SBE 12.x Updates

We are just getting a newly migrated network online with their virus protection. In this case they are too large for Microsoft’s Security Essentials product so we ran with SEP.

This is what FileConnect looked like today:

image

Note the posting date for most files as being November 16th.

As with previous versions if any clients are resident on the current user machines they may need to be manually removed prior to delivering the new client to them.

We will be configuring the Windows Firewall to allow for remote delivery of any and all client updates. So, hopefully we will not need to go through the manual remove and replace process.

We run with Symantec over other products because the name is known to our clients and it does a relatively decent job of protecting the network.

We also mandate UAC via Group Policy and in more security conscious environments utilize Group Policy Preferences to disable all local admin accounts except a restricted domain account that is delivered via Group Policy Preferences into the local admin group. We then keep control over that user account’s password to allow for some change control.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*Our original iMac was stolen (previous blog post). We now have a new MacBook Pro courtesy of Vlad Mazek, owner of OWN.

Windows Live Writer

No comments: