Wilders Security Forums  

Go Back   Wilders Security Forums > Security Products > other anti-virus software
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #26  
Old December 7th, 2011, 12:07 AM
dan_maran's Avatar
dan_maran dan_maran is offline
Very Frequent Poster
 
Join Date: Aug 2004
Location: Brooklyn, NY
Posts: 1,053
Default Re: Symantec Endpoint Protection 12.1

Just a FYI to people in this thread that the updates don't have to be obtained from your IT provider, you may download and install them yourself as always from:
ftp://ftp.symantec.com/public/englis...otection/12.1/

This is where your IT probably gets them from, I know this is where I used to get mine to deploy....
__________________
<insert> catchy phrase here</instert>
Let's see how long I'm back for this time
  #27  
Old December 7th, 2011, 12:39 PM
iwod's Avatar
iwod iwod is offline
Frequent Poster
 
Join Date: Jun 2004
Posts: 707
Default Re: Symantec Endpoint Protection 12.1

Oh Great, i think i should pick up a copy soon.
__________________
"Security" is not a Product.
Please use "search" first.... especially on the topic resources usage.
  #28  
Old January 6th, 2012, 11:03 PM
Frank the Perv's Avatar
Frank the Perv Frank the Perv is offline
Frequent Poster
 
Join Date: Dec 2005
Location: Virginia, USA
Posts: 367
Default Re: Symantec Endpoint Protection 12.1

Anybody know when an RU2 update might come out?

I have not yet updated to RU1, but I'm now thinking about it.

At this link page:

ftp://ftp.symantec.com/public/englis...otection/12.1/

..it eventually lists:

1. Patches-SEP32_12.1RU!.md5 130 B 11/16/11 9:04:00 PM
2. Patches-SEP64_12.1_RU1.md5 134 B 11/16/11 9:04:00 PM
3. SEP64_23To157_clientDAXMSI.exe 6.9 MB 11/16/11 9:04:00 PM
4. SEP64_4971To157_clientDAXMSI.exe 11.8 MB 11/16/11 9:04:00 PM
5. SEP_23To157_clientDAXMSI.exe 5.8 MB 11/16/11 9:05:00 PM
6. SEP_4971To157_clientDAXMSI.exe 9.9 MB 11/16/11 9:05:00 PM

For a client only update, I'd download the Patch for SEP64 (#2) --as I have a 64 bit computer. But what about #'s 3, 4, 5, and 6? And #2 is a small file... bottom line, which ones would I download?

To further complicate this for me, at this link:

http://www.symantec.com/business/sup...&id=TECH174706

This link:
Client patches from Symantec Endpoint Protection 12.1 to 12.1 RU1
SEP_To_157.zip (21.9 MBytes)

..when clicked has only two files with slightly different dates from the above files.


Can a SEP 12.1 knowledgeable person help me? I'm actually running SEP 12.1 on three computers -- all unmanaged clients. A Win7 64 bit desktop, A Vista 32 bit desktop, and a Win7 64 bit laptop.

I just want to get this right.


Thank you,

-FTP





^^
__________________
"I think computer viruses should count as life. I think it says something about human nature that the only form of life we have created so far is purely destructive. We've created life in our own image." —Stephen Hawking

SEP 12.1, MBAM Pro, WinPatrol Plus, Norton DNS, ABP, EAM Scanner
  #29  
Old January 7th, 2012, 12:09 AM
Zyrtec's Avatar
Zyrtec Zyrtec is offline
Frequent Poster
 
Join Date: Mar 2008
Location: USA
Posts: 534
Default Re: Symantec Endpoint Protection 12.1

Quote:
Originally Posted by Frank the Perv
Anybody know when an RU2 update might come out?

I have not yet updated to RU1, but I'm now thinking about it.

At this link page:

ftp://ftp.symantec.com/public/englis...otection/12.1/

..it eventually lists:

1. Patches-SEP32_12.1RU!.md5 130 B 11/16/11 9:04:00 PM
2. Patches-SEP64_12.1_RU1.md5 134 B 11/16/11 9:04:00 PM
3. SEP64_23To157_clientDAXMSI.exe 6.9 MB 11/16/11 9:04:00 PM
4. SEP64_4971To157_clientDAXMSI.exe 11.8 MB 11/16/11 9:04:00 PM
5. SEP_23To157_clientDAXMSI.exe 5.8 MB 11/16/11 9:05:00 PM
6. SEP_4971To157_clientDAXMSI.exe 9.9 MB 11/16/11 9:05:00 PM

For a client only update, I'd download the Patch for SEP64 (#2) --as I have a 64 bit computer. But what about #'s 3, 4, 5, and 6? And #2 is a small file... bottom line, which ones would I download?

To further complicate this for me, at this link:

http://www.symantec.com/business/sup...&id=TECH174706

This link:
Client patches from Symantec Endpoint Protection 12.1 to 12.1 RU1
SEP_To_157.zip (21.9 MBytes)

..when clicked has only two files with slightly different dates from the above files.


Can a SEP 12.1 knowledgeable person help me? I'm actually running SEP 12.1 on three computers -- all unmanaged clients. A Win7 64 bit desktop, A Vista 32 bit desktop, and a Win7 64 bit laptop.

I just want to get this right.


Thank you,

-FTP





^^

Okay, after reading your post and checking up at the links you provided, this is what I think:

I believe that 4971 to 157 means the original release of SEP 12.1 which had been released to public on July 5th, 2011 that can be upgraded to version 12.1.1000.157 which is RU1 by applying that patch.

In regards to 23 to 157 I believe that it's referring to the public BETA which was released to people who registered at Symantec.com in April-May, 2011 time frame being updated to RU1 [157] by applying that patch.

In regards to RU2, I haven't heard anything yet, as of today. However, if you'd like to keep current in regards to the development of the next RU's for SEP 12.1, the best place to start would be this one: http://www.symantec.com/connect/secu...tion-antivirus

That's the web-site I visit regularly to keep up with the latest news in regards to new SEP versions and RU updates.

By the way, I did not apply any patches to my SEP installation since I got the full 1.8GB SEP 12.1 RU1 installer from a friend and this installer included both folders, the 32-bit installer and the 64-bit one.


Hope this helps.
__________________
Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety. Benjamin Franklin [1706 - 1790]

Last edited by Zyrtec : January 7th, 2012 at 12:16 AM.
  #30  
Old January 7th, 2012, 01:03 PM
cruelsister cruelsister is offline
Frequent Poster
 
Join Date: Nov 2007
Location: Paris
Posts: 588
Default Re: Symantec Endpoint Protection 12.1

Zyrtec- Remember that if you have installed SEP12 as an Unmanaged client you should also get a copy of your friends Symantec Licensing File (.SLF), otherwise SEP's Insight technology will not be active.

When you get the file place it in Drive:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\inbox\

Forgive me if you already know this, but many aren't aware that some things have changed since version 11.
__________________
Whom the Gods would destroy, they first make Proud
  #31  
Old January 14th, 2012, 06:47 PM
oliverjia's Avatar
oliverjia oliverjia is offline
Regular Poster
 
Join Date: Jul 2005
Posts: 188
Default Re: Symantec Endpoint Protection 12.1

Are you sure? I just checked the "inbox" folder and it's empty without any .slf file. However, I am 100% sure the download insight detection for SEP 12.1 client is still working fine on my system. sep 12.1 was installed as unmanaged client.
Do you mind point me to the source of your information? I just would like to confirm. thanks.

Quote:
Originally Posted by cruelsister
Zyrtec- Remember that if you have installed SEP12 as an Unmanaged client you should also get a copy of your friends Symantec Licensing File (.SLF), otherwise SEP's Insight technology will not be active.
  #32  
Old January 15th, 2012, 09:37 AM
cruelsister cruelsister is offline
Frequent Poster
 
Join Date: Nov 2007
Location: Paris
Posts: 588
Default Re: Symantec Endpoint Protection 12.1

Totally sure. From the SEP12 website: "To enable the submission of reputation data from an unmanaged client, you must install a paid license on the client. Use the following procedure to install a license on an unmanaged client."

http://www.symantec.com/business/sup...&id=HOWTO54944

By the way, the fact that you don't have this file currently can be due to the license data being input on installation. SEP will initially check for the file; if the file exists and is valid, it's automatically removed from the inbox after it is processed.

Initially there was much discussion about crippling unlicensed Unmanaged Clients to a far greater extent (apparently SEP had become popular among the Pirate crowd because of the ease of installation), but there was a raft of complaints from the Corporate Beta testers.

Hope this helps.
__________________
Whom the Gods would destroy, they first make Proud
  #33  
Old January 15th, 2012, 10:21 AM
oliverjia's Avatar
oliverjia oliverjia is offline
Regular Poster
 
Join Date: Jul 2005
Posts: 188
Default Re: Symantec Endpoint Protection 12.1

Thanks very much. Followed the link and also your instructions, I've found the .slf in /config folder. Thanks much for your info!

regards,
oliverjia



Quote:
Originally Posted by cruelsister
Totally sure. From the SEP12 website: "To enable the submission of reputation data from an unmanaged client, you must install a paid license on the client. Use the following procedure to install a license on an unmanaged client."

http://www.symantec.com/business/sup...&id=HOWTO54944

By the way, the fact that you don't have this file currently can be due to the license data being input on installation. SEP will initially check for the file; if the file exists and is valid, it's automatically removed from the inbox after it is processed.

Initially there was much discussion about crippling unlicensed Unmanaged Clients to a far greater extent (apparently SEP had become popular among the Pirate crowd because of the ease of installation), but there was a raft of complaints from the Corporate Beta testers.

Hope this helps.
  #34  
Old January 15th, 2012, 12:34 PM
Frank the Perv's Avatar
Frank the Perv Frank the Perv is offline
Frequent Poster
 
Join Date: Dec 2005
Location: Virginia, USA
Posts: 367
Default Re: Symantec Endpoint Protection 12.1

First, thank you Zyrtec, cruelsister & others for the information -- it is appreciated.

My download is as an unmanaged client also. My employer has a very large contract with Symantec (I'd guess it is their largest contract), and thus we have been granted home use of the product.

We actually get our download from my employers website... where we are given no licensing or other information. We can actually download all sorts of Symantec products at no cost -- but they are mostly enterprise products.

What cruelsister stated makes sense to me:

Quote:
By the way, the fact that you don't have this file currently can be due to the license data being input on installation. SEP will initially check for the file; if the file exists and is valid, it's automatically removed from the inbox after it is processed.

Reference Insight, I see it there... the box is checked (See image).

From the image I've downloaded on this post, can I be sure that Insight is up and running?

http://i42.tinypic.com/oqhg5l.png

http://tinypic.com/r/oqhg5l/5
__________________
"I think computer viruses should count as life. I think it says something about human nature that the only form of life we have created so far is purely destructive. We've created life in our own image." —Stephen Hawking

SEP 12.1, MBAM Pro, WinPatrol Plus, Norton DNS, ABP, EAM Scanner
  #35  
Old January 15th, 2012, 10:04 PM
Zyrtec's Avatar
Zyrtec Zyrtec is offline
Frequent Poster
 
Join Date: Mar 2008
Location: USA
Posts: 534
Default Re: Symantec Endpoint Protection 12.1

cruelsister,

As user Frank is pointing out I also do have the Insight component on my SEP 12.1 client installation and even when I do not have the license file installed on this client only installation, I've seen Insight kicking in whenever I download a suspicious and unknown file from MDL or malc0de. How is that?
__________________
Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety. Benjamin Franklin [1706 - 1790]
  #36  
Old January 15th, 2012, 11:34 PM
cruelsister cruelsister is offline
Frequent Poster
 
Join Date: Nov 2007
Location: Paris
Posts: 588
Default Re: Symantec Endpoint Protection 12.1

From what I remember from the SEP Enterprise Beta dog and pony shows, the lack of a licensed unmanaged client would not change the GUI functionality in any way, but would result in no meaningfull Insight information coming back from the Symantec servers (if you catch my meaning).


Zyrtec- When you say that you see Insight kick in when you are downloading, are you getting a box with the message "You should only allow files that you are sure are safe. Are you sure that you want to allow this file?" ?
__________________
Whom the Gods would destroy, they first make Proud

Last edited by cruelsister : January 16th, 2012 at 11:35 AM.
  #37  
Old January 16th, 2012, 05:29 PM
Zyrtec's Avatar
Zyrtec Zyrtec is offline
Frequent Poster
 
Join Date: Mar 2008
Location: USA
Posts: 534
Default Re: Symantec Endpoint Protection 12.1

Quote:
Originally Posted by cruelsister

Zyrtec- When you say that you see Insight kick in when you are downloading, are you getting a box with the message "You should only allow files that you are sure are safe. Are you sure that you want to allow this file?" ?


cruelsister,

This is the SEP 12.1 client, Download Insight screen popup I'm seeing whenever I download a file unknown to Symantec Download Insight [see attached image]:

Click image for larger version

Name:	SEP Download Insight.jpg
Views:	112
Size:	278.6 KB
ID:	231353
__________________
Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety. Benjamin Franklin [1706 - 1790]
  #38  
Old January 18th, 2012, 03:53 PM
XTremeX XTremeX is offline
Infrequent Poster
 
Join Date: Jan 2011
Posts: 7
Default Re: Symantec Endpoint Protection 12.1

Quote:
Originally Posted by Zyrtec
cruelsister,

This is the SEP 12.1 client, Download Insight screen popup I'm seeing whenever I download a file unknown to Symantec Download Insight [see attached image]:

Attachment 231353

same results here.Download Insight works pretty fine
  #39  
Old May 3rd, 2012, 08:01 PM
Frank the Perv's Avatar
Frank the Perv Frank the Perv is offline
Frequent Poster
 
Join Date: Dec 2005
Location: Virginia, USA
Posts: 367
Default Re: Symantec Endpoint Protection 12.1

Symantec Endpoint Protection 12.1 RU1 MP1 Client-only patch


http://www.symantec.com/business/sup...OADS&actp=LIST


I can't seem to make it work.

Aggravating.
__________________
"I think computer viruses should count as life. I think it says something about human nature that the only form of life we have created so far is purely destructive. We've created life in our own image." —Stephen Hawking

SEP 12.1, MBAM Pro, WinPatrol Plus, Norton DNS, ABP, EAM Scanner

Last edited by Frank the Perv : May 3rd, 2012 at 08:15 PM.
  #40  
Old May 4th, 2012, 12:14 PM
Zyrtec's Avatar
Zyrtec Zyrtec is offline
Frequent Poster
 
Join Date: Mar 2008
Location: USA
Posts: 534
Default Re: Symantec Endpoint Protection 12.1

@ Frank :

Couldn't you try to install the full-installation file instead of upgrading from patch "0" to RU1 ? Which one are you trying to install, 32-bit or 64-bit one ?

By the way, I have the official full 1.8GB installer provided by a friend who deployed SEP 12.1 throughout his organization [it contains the 32-bit/64-bit installers, Linux installer and Mac installer as well as documentation]. I also have the full standalone 32-bit installer as well as the 64-bit installer which are just several hundreds of MB in size only [less bandwidth needed to download].


Carlos
__________________
Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety. Benjamin Franklin [1706 - 1790]
  #41  
Old May 4th, 2012, 12:35 PM
JRViejo's Avatar
JRViejo JRViejo is offline
Global Moderator
 
Join Date: Jul 2008
Posts: 10,448
Default Re: Symantec Endpoint Protection 12.1

Removed Off Topic Posts. The subject is Symantec Endpoint Protection 12.1; let's keep it that way, shall we? Thanks.
__________________
JR
"You don't have to win every argument. Agree to disagree." Regina Brett
 

Wilders Security Forums > Security Products > other anti-virus software « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 03:38 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums