Installing SEP 12.1 RU6 MP6 Managed Silently?

if the systems already have SEP installed just push the SEP.mpkg and reboot the machines. Make sure the SEP Manager IP's / Hostname are still the same. Open the Sylink.xml file for details of the SEP Manager IP's / Hostnames.

If you open the Symantec Endpoint Protection Installer under the Tools menu there is a Create remote deployment package that you can deploy with Casper.

I've asked our security admin if they can look at that.

if the systems already have SEP installed just push the SEP.mpkg and reboot the machines. Make sure the SEP Manager IP's / Hostname are still the same. Open the Sylink.xml file for details of the SEP Manager IP's / Hostnames.

The issue I've run in to in the past is, upgrades will sometimes get corrupted and the new versions shows as installed, but you can't launch the client or LU. I'd like to remove everything in a previous step and then install it fresh second.

Unfortunately some versions of SEP don't allow an in place upgrade, so in the past what I've done is created a package that copies the Uninstaller into a known location, and then have a script that runs it:

#!/bin/sh

open -a /Applications/Symantec Solutions/Symantec Uninstaller.app

Then I put this into Self Service, have the end user run it and restart, and then you can run the silent install (but of course also requires a restart).

Not the most elegant, I know.

for removing SEP try this https://jamfnation.jamfsoftware.com/discussion.html?id=21364

to install just one SYlink :here is how you drop a SyLink.xml use this app: /Library/Application Support/Symantec/SMC/tools/SyLinkDrop.app
it will pop up to get the file and do it for you. otherwise its much simpler to do this:

To install SEP silently Take the DMG from Symantec and drop it (Copy the content ) into a new folder on your desktop. drop your SyLink.xml file in your additional resource folder.
launch the Symantec Endpoint Protection Installer under the Tools menu there is a Create remote deployment package that you can deploy with Casper. this will do a silent install but YOU MUST reboot.

OK, I thought that had to be done from the SEP management console. I was able to package it, and it looks like it's showing up as managed like it should be. Thanks!

We were successful in deploying the upgrade using the SEP Manager instead of JAMF today. The security team is pushing the upgrade to a few more Mac workstations today after the successful deploying from the SEP Server to the Mac clients.

I've always packaged up the files in the "Additional Resources" folder, put them in a temp location, and installed the SEP.mpkg package with a postflight script. As long as all the other files are in the same folder as it, the installation goes smoothly. You definitely need to reboot afterwards unless you are OK with AV not working until the system naturally reboots.