- Symantec Endpoint Protection 14.3 Mac Download
- Symantec Endpoint Protection Macos Catalina Download
- Download Latest Symantec Endpoint Protection
The users receive the URL in an email to download the package and install the. Symantec Endpoint Protection. Symantec Endpoint Protection Manager. Mac clients automatically prompt a restart when installation completes. Linux clients do not require a restart. Restarting the client computers from. Symantec Endpoint Protection Manager. Download Symantec Endpoint Protection - Powerful, reliable and accessible endpoint antivirus software solution that you can use on both virtual and physical computer systems.
In Symantec Endpoint Protection (SEP) 14.1. (14.1 ) and later, you have at least two options for downloading LiveUpdate (LU) content to Symantec Endpoint Protection clients for Mac and Linux.
Note: Migration assistant pc to mac download. Linux client support is added with Symantec Endpoint Protection 12.1.5 and is only available starting with that release.
- Use Symantec LiveUpdate Administrator 2.x (LUA 2.x). This is the best option for installations with larger numbers of Mac and/or Linux computers.
- For smaller installations, you can configure the Apache web server as a reverse proxy. This enables the Apache web server installed along with Symantec Endpoint Protection Manager (SEPM) to download and cache the LU content for Mac and Linux clients locally whenever new content is published. This configuration results in saving of external network bandwidth.
Below are the instructions to set up the Apache web server in Symantec Endpoint Protection Manager to allow Symantec Endpoint Protection clients for Mac and Linux to download LiveUpdate (LU) content by the webserver. Please note that this solution enables Symantec Endpoint Protection Manager to act as a cache: it does not process Mac or Linux definitions into .dax files as it does with Windows definitions. It does not enable Symantec Endpoint Protection clients for Mac or Linux to update from a Group Update Provider (GUP).
Note: You can only make these configuration changes on the enterprise version of Symantec Endpoint Protection. These instructions do not apply to Symantec Endpoint Protection Small Business Edition 12.1 (SEP SBE).
Configure the Apache web server in Symantec Endpoint Protection Manager
Take the following steps to configure Apache web server to serve as a reverse proxy:
- Stop semwebsrv (Symantec Endpoint Protection Manager Webserver) and semsrv (Symantec Endpoint Protection Manager).
- Create a folder called cache-root in the Apache folder of your Symantec Endpoint Protection Manager installation directory, e.g.
SEPM_Installapachecache-root
The default path of SEPM_Install is as follows:
Ensure that the account running Symantec Endpoint Protection Manager Webserver has full control of SEPM_Installapachecache-root.- 64-bit systems: C:Program Files (x86)SymantecSymantec Endpoint Protection Manager
- 32-bit systems: C:Program FilesSymantecSymantec Endpoint Protection Manager (12.1.x only)
- Verify if the following files are present in the folder apachemodules: If the files are not present, copy the files from the downloaded installation folder or DVD from ToolsApache-ReverseProxy to SEPM_Installapachemodules. https://ameblo.jp/otnehcontga1989/entry-12639663826.html. Refer to the section Security and Compatibility for more details.
- mod_cache.so
- mod_cache_disk.so (12.1.5 and later)
- mod_proxy.so
- mod_proxy_http.so
- mod_setenvif.so
- To make a backup of the original configuration file, navigate to SEPM_Installapacheconf, and then copy httpd.conf to httpd-orig.conf.
- Make the following changes to httpd.conf:
- Locate the following line, and add the character
#
to comment it out, as shown:#AsyncSendFile anydirectory
- Locate the following lines and remove the character # to uncomment them, and make the following change, where SEPM_Install is the actual path of your Symantec Endpoint Protection Manager installation (use forward slashes).
AsyncSendFile givendirectory
ForceAsyncSendFile 'SEPM_Install/Inetpub/content' - Optionally, to add cache logging, search for the following line in httpd.conf:
LogFormat '%h %l %u %t '%r' %>s %b' common
.. and replace it with:LogFormat '%h %l %u %t %{cache-status}e '%r' %>s %b' common
- Add the following lines to the end. Replace SEPM_Install in the text below with the actual path of your Symantec Endpoint Protection Manager installation.
For 12.1.5 and later:
Note: Red text indicates file names that have changed from the version of Apache included with 12.1.4. If you previously implemented this functionality for 12.1.4, you only need to update the changed file names in httpd.conf.
- Locate the following line, and add the character
- Save and then close the file.
- Start semwebsrv (Symantec Endpoint Protection Manager Webserver) and semsrv (Symantec Endpoint Protection Manager).
To test that the proxy server is running by downloading an LU file, click Start > Run, and then enter http://localhost:8014/luproxy/masttri.zip. If your Symantec Endpoint Protection Manager Apache web server uses a different port than 8014, replace 8014 with your actual port number in the above URL.
Note: While the massttri.zip file is requested via a local URL address, the request is passed to Symantec's public LiveUpdate server. Make sure that the connection to LiveUpdate web domains can be established from the Symantec Endpoint Protection Manager server according to TECH102059. The reverse proxy also requires a direct connection to Symantec's LiveUpdate servers - it cannot itself go through another proxy.
The LU download requests to the Apache web server are logged in a separate log file, located in SEPM_Installapachelogsaccess-%Z.log.
Update LiveUpdate policy for Mac and Linux clients to point to new LiveUpdate server
Take the following steps to update your LiveUpdate policy for Mac and Linux clients for your desired groups. Once the policy is updated, these clients will point to the newly configured Apache web server for downloading LU content.
- Within Symantec Endpoint Protection Manager, click Policies > LiveUpdate. On the LiveUpdate Settings tab, double-click the LiveUpdate Settings policy that applies to your desired groups.
- Click Use a specified internal LiveUpdate Server under Mac Settings > Server Settings (or Linux Settings > Server Settings) and specify the name 'SEPM HTTP LU Proxy,' with the corresponding URL: 'http://ServerIP:8014/luproxy' or 'http://ServerName:8014/luproxy'
Where ServerIP or ServerName represents the IP number or name of the server that hosts Symantec Endpoint Protection Manager. If the Symantec Endpoint Protection Manager Apache web server uses a different port that 8014, replace 8014 with your actual port number in the above URL. - Add Symantec LiveUpdate server as a fallback mechanism (this is optional, because this is always a fallback option). Use http://liveupdate.symantecliveupdate.com.
- Enable download randomization under Mac Settings > Schedule (or Linux Settings > Schedule). If the option is not greyed out, check Randomize the start time. This prevents the Apache web server from getting overloaded at certain times in a day.
Additionally, on SEP 12.1.x clients for Linux, edit the liveupdate.conf file and set serverlogging=false. SEP For Linux 14.0 does not require this setting. See TECH230862.
Managing cache file size
To manage the size of your cache file, take the following steps.
- Verify if the htcacheclean.exe file is present in the following folder:
SEPM_Installapachebin - If the file is not present in the mentioned location, copy htcacheclean.exe from the ToolsApache-ReverseProxy folder on your DVD to SEPM_Installapachebin
- Enter the following command while logged in with an account that has full access rights on the cache-root folder:
htcacheclean -n -t -d1440 -l1024M -p'SEPM_Install/apache/cache-root'
This will run the htcacheclean tool in daemon mode. The cache cleaning will be done on a daily interval. The maximum cache size allowed on disk is 1 GB.
To automatically start the htcacheclean daemon every time Windows starts, take the following steps.
- Hold down the Windows key on your keyboard and press the letter R to open the Run dialog. Type taskschd.msc, and then click OK.
- In the Task Scheduler, in the right pane, click Create Basic Task.
- Name the new task with a description such as Manage Apache Cache Size, and then click Next.
- To set the task to run every time Windows starts, in the Task Trigger pane, click When the computer starts, and then click Next.
- In the Action dialog box, click Start a program, and then click Next.
- Enter the full path to htcacheclean into Program/script:
SEPM_Installapachebinhtcacheclean.exe - Enter the following arguments into Add arguments (optional), and then click Next.
-n -t -d1440 -l1024M -p'SEPM_Install/apache/cache-root' - To complete adding the scheduled task, click Finish.
- In the Windows Task Scheduler library, right-click the task you created, and then click Properties.
- In the Settings tab, click to deselect Stop the task if it runs longer than, and then click OK.
Since the task does not run until you restart the system, you can run it now. In the Task Scheduler, right-click the task you created, and then click Run.
Note: Ensure that the user account running the task has full control on the folder SEPM_Installapachecache-root.
Performance and scale
This configuration is designed for small numbers of Mac and/or Linux clients. You should only use this setup if there are only a few Mac and/or Linux clients and the network connecting clients and Symantec Endpoint Protection Manager has good bandwidth throughput. Assuming that each client downloads roughly 500KB of LU content on daily basis, 2000 Mac or Linux clients will result in a download of approximately 1 GB of LU content daily from the Apache web server. For configurations having large numbers of clients, you should consider an alternative like Symantec LiveUpdate Administrator.
Security and compatibility
Symantec suggests the use of only Symantec-signed binaries for Apache modules that are mentioned in this article. These signed binaries are available on the Symantec Endpoint Protection downloaded installation file. Note that the required binaries also get installed along with Symantec Endpoint Protection Manager for versions 12.1.4 and later.
For Symantec Endpoint Protection 14:
- The downloaded full installation file, ToolsApache-ReverseProxy
Because new vulnerabilities may be published after the publication of this article, please check the vulnerabilities published by the Apache project for the appropriate version of Apache web server: http://httpd.apache.org/security/
SEPM Upgrades
Note that upgrading the SEP Manager may reset or overwrite this configuration file. As such, post-SEPM upgrade ensure the changes made to httpd.conf are checked and corrected.
Supported Product
Symantec Endpoint Protection is recommended for use at the University. It checks hard drives, removable media, and email attachments for known computer viruses and removes any that it finds, including macro viruses. It also monitor yours computer and notify you of any infection attempts. Symantec Endpoint Protection is site licensed at Penn and available free of charge to members of the Penn community.
Licensing
The University of Pennsylvania owns the Symantec Endpoint Protection license.
Students may install Symantec Endpoint Protection on their personal computers.
Symantec Endpoint Protection 14.3 Mac Download
Faculty and staff may install Symantec Endpoint Protection on their University-owned systems. Also, faculty and staff may install the software on a single personal computer in accordance with the terms of the retail license agreement.
Symantec Endpoint Protection Macos Catalina Download
Related resources
- Site Licenses and Volume Discounts web site.
Before you download
Some Schools and Centers manage Symantec's Windows updates via their own network servers. That is, the School or Center will control, monitor, and update the virus updates on your machine from their network server. Faculty and staff should speak with their Local Support Provider (LSP) to determine how their virus updates will be managed.
The software available from this page is configured so that virus update files are managed directly from Symantec's web site. With the exception of faculty and staff, this configuration should suffice for most users.
The software available from this page is configured so that virus update files are managed directly from Symantec's web site. With the exception of faculty and staff, this configuration should suffice for most users.
Download and setup instructions
Step 1 - Remove existing antivirus software
If you already have antivirus software installed on your computer, such as VirusScan for Windows, you should remove it before installing Symantec's antivirus products. Windows users must also remove earlier versions of Symantec AntiVirus or Symantec Endpoint Protection, before installing the current version of Symantec Endpoint Protection.
Step 2 - Download antivirus software
Symantec's antivirus products are available for download using your PennKey and password. Before the software will download to your machine, you will need to agree to the licensing agreement.
Download Symantec Endpoint Protection
If you already have antivirus software installed on your computer, such as VirusScan for Windows, you should remove it before installing Symantec's antivirus products. Windows users must also remove earlier versions of Symantec AntiVirus or Symantec Endpoint Protection, before installing the current version of Symantec Endpoint Protection.
Step 2 - Download antivirus software
Symantec's antivirus products are available for download using your PennKey and password. Before the software will download to your machine, you will need to agree to the licensing agreement.
Download Symantec Endpoint Protection
After you accept the licensing agreement, in the 'Save As' window, create or go to the directory in which you want to save the file, append .exe to the file name if it is not already there, and click 'Save'. Open this directory, double-click the installation file, and follow the on-screen instructions accepting the defaults. After you finish, you can delete the installation file.
Note: Internet Explorer users may need to append .exe to the filename after downloading Symantec Endpoint Protection to the desktop.
Step 3 - Update now!
If you installed the software as instructed in step 2, it should have automatically run LiveUpdate to get the latest virus update files. If not, run LiveUpdate immediately after installation.
Step 4 - Scan your computer for viruses
Symantec Endpoint Protection's realtime autoprotection has been enabled to check for viruses daily.
Step 5 - Keep your antivirus definitions up-to-date
In case of a virus emergency, you'll want to run LiveUpdate manually to get the latest virus protection and to keep your virus definitions up-to-date.
Note: Internet Explorer users may need to append .exe to the filename after downloading Symantec Endpoint Protection to the desktop.
Step 3 - Update now!
If you installed the software as instructed in step 2, it should have automatically run LiveUpdate to get the latest virus update files. If not, run LiveUpdate immediately after installation.
Step 4 - Scan your computer for viruses
Symantec Endpoint Protection's realtime autoprotection has been enabled to check for viruses daily.
Step 5 - Keep your antivirus definitions up-to-date
In case of a virus emergency, you'll want to run LiveUpdate manually to get the latest virus protection and to keep your virus definitions up-to-date.
Step 6 - Delete viruses from Quarantine
You can delete infected files from the Quarantine.
You can delete infected files from the Quarantine.
Consult additional instructions to learn how to scan your computer for viruses, keep your antivirus definitions current, and delete viruses from Quarantine.
The software available from this page is configured so that virus update files are managed directly from Symantec's web site. This configuration should suffice for most users. One click root download mac.
Download and setup instructions
Step 1 - Remove existing antivirus software
If you already have antivirus software installed on your computer, you should remove it before installing Symantec's antivirus products.
Step 2 - Download antivirus software
Symantec's antivirus products are available for download using your PennKey and password. Before the software will download to your machine, you will need to agree to the licensing agreement.
Download Symantec Endpoint Protection
If you already have antivirus software installed on your computer, you should remove it before installing Symantec's antivirus products.
Step 2 - Download antivirus software
Symantec's antivirus products are available for download using your PennKey and password. Before the software will download to your machine, you will need to agree to the licensing agreement.
Download Symantec Endpoint Protection
After accepting the licensing agreement, the file will automatically unzip and place an installer in your default download location (probably your Downloads folder). Double-click the installer icon and follow the on-screen instructions accepting the defaults. After you finish, you can delete the installer.
Step 3 - Update now!
If you installed the software as instructed in step 2, it should have automatically run LiveUpdate to get the latest virus update files. If not, run LiveUpdate immediately after installation.
Step 4 - Scan your computer for viruses
The antivirus software has been configured to automatically scan your computer to keep it free from viruses.
Step 5 - Keep your antivirus definitions up-to-date
In case of a virus emergency, you'll want to run LiveUpdate manually to get the latest virus protection and to keep your virus definitions up-to-date.
Step 3 - Update now!
If you installed the software as instructed in step 2, it should have automatically run LiveUpdate to get the latest virus update files. If not, run LiveUpdate immediately after installation.
Step 4 - Scan your computer for viruses
The antivirus software has been configured to automatically scan your computer to keep it free from viruses.
Step 5 - Keep your antivirus definitions up-to-date
In case of a virus emergency, you'll want to run LiveUpdate manually to get the latest virus protection and to keep your virus definitions up-to-date.
Step 6 - Delete viruses from Quarantine
You can delete infected files from the Quarantine.
Consult additional instructions to learn how to scan your computer for viruses, keep your antivirus definitions current, and delete viruses from Quarantine.
You can delete infected files from the Quarantine.
Consult additional instructions to learn how to scan your computer for viruses, keep your antivirus definitions current, and delete viruses from Quarantine.
*Important Note: Since the Linux operating system is not supported at the University, SEP for Linux is not an officially supported product. To obtain the most current version of the SEP client for Linux, contact ISC Client Care at 215.898.1000, or email [email protected]
Download Latest Symantec Endpoint Protection
Supported Linux Distributions:
■ CentOS 6U4, 6U5; 32-bit and 64-bit
■ Debian 6.0.5 Squeeze; 32-bit and 64-bit
■ Fedora 16, 17; 32-bit and 64-bit
■ Novell Open Enterprise Server (OES) 2 SP2 and 2 SP3 running SUSE Linux Enterprise
Server (SLES) 10 SP3; 32-bit and 64-bit
■ Novell Open Enterprise Server (OES) 11 and 11 SP1 running SUSE Linux Enterprise
Server (SLES) 11 SP1 and SP2; 64-bit
■ Oracle Linux (OEL) 5U8, 5U9, 6U2, 6U4, 6U5; 64-bit
■ Red Hat Enterprise Linux Server (RHEL) 5U7 - 5U11, 6U2 - 6U6, 7, 7.1; 32-bit and
64-bit
■ SUSE Linux Enterprise Server (SLES) 10 SP3, 10 SP4, 11 SP1 - 11 SP3; 32-bit and
64-bit
■ SUSE Linux Enterprise Desktop (SLED) 10 SP3, 10 SP4, 11 SP1 - 11 SP3; 32-bit and
64-bit
■ Ubuntu 11.10, 12.04, 12.04.02, 14.04, 16.04; 32-bit and 64-bit
For a list of supported operating system kernels, see Supported Linux kernels for Symantec
Endpoint Protection.
■ Debian 6.0.5 Squeeze; 32-bit and 64-bit
■ Fedora 16, 17; 32-bit and 64-bit
■ Novell Open Enterprise Server (OES) 2 SP2 and 2 SP3 running SUSE Linux Enterprise
Server (SLES) 10 SP3; 32-bit and 64-bit
■ Novell Open Enterprise Server (OES) 11 and 11 SP1 running SUSE Linux Enterprise
Server (SLES) 11 SP1 and SP2; 64-bit
■ Oracle Linux (OEL) 5U8, 5U9, 6U2, 6U4, 6U5; 64-bit
■ Red Hat Enterprise Linux Server (RHEL) 5U7 - 5U11, 6U2 - 6U6, 7, 7.1; 32-bit and
64-bit
■ SUSE Linux Enterprise Server (SLES) 10 SP3, 10 SP4, 11 SP1 - 11 SP3; 32-bit and
64-bit
■ SUSE Linux Enterprise Desktop (SLED) 10 SP3, 10 SP4, 11 SP1 - 11 SP3; 32-bit and
64-bit
■ Ubuntu 11.10, 12.04, 12.04.02, 14.04, 16.04; 32-bit and 64-bit
For a list of supported operating system kernels, see Supported Linux kernels for Symantec
Endpoint Protection.
SEP for Linux Overview
Supported Linux Kernels for SEP
Symantec Endpoint Protection Diagnostic Tool
Server administrators only
For current/latest releases of antivirus software
As of SEP 12.x all Enterprise Management Applications (SEPM) require the installation of a license file. Please contact ISC Client Care to obtain the correct license file.