Posted on 10-04-2016 09:39 AM
I got the newest version from our security team, and it came with a few components:
If I launch "Symantec Endpoint Protection Installer.app/Contents/MacOS/Symantec Endpoint Protection Installer", it provides a GUI. I'd like to have it install silently, which just running SEP.mpkg accomplishes, but the GUI install seems to actually configure the managed portion properly.
I've read you can install the SyLink.xml file on the machine after, but that requires manually intervention as far as I can tell, but there may be some command line options.
Solved! Go to Solution.
Posted on 10-04-2016 09:46 AM
If you open the Symantec Endpoint Protection Installer under the Tools menu there is a Create remote deployment package that you can deploy with Casper.
Posted on 10-05-2016 07:36 AM
for removing SEP try this https://jamfnation.jamfsoftware.com/discussion.html?id=21364
to install just one SYlink :here is how you drop a SyLink.xml use this app:
/Library/Application Support/Symantec/SMC/tools/SyLinkDrop.app
it will pop up to get the file and do it for you. otherwise its much simpler to do this:
To install SEP silently
Take the DMG from Symantec and drop it (Copy the content ) into a new folder on your desktop.
drop your SyLink.xml file in your additional resource folder.
launch the Symantec Endpoint Protection Installer under the Tools menu there is a Create remote deployment package that you can deploy with Casper.
this will do a silent install but YOU MUST reboot.
Posted on 10-04-2016 09:46 AM
If you open the Symantec Endpoint Protection Installer under the Tools menu there is a Create remote deployment package that you can deploy with Casper.
Posted on 10-04-2016 09:52 AM
if the systems already have SEP installed just push the SEP.mpkg and reboot the machines. Make sure the SEP Manager IP's / Hostname are still the same. Open the Sylink.xml file for details of the SEP Manager IP's / Hostnames.
Posted on 10-04-2016 09:59 AM
If you open the Symantec Endpoint Protection Installer under the Tools menu there is a Create remote deployment package that you can deploy with Casper.
I've asked our security admin if they can look at that.
if the systems already have SEP installed just push the SEP.mpkg and reboot the machines. Make sure the SEP Manager IP's / Hostname are still the same. Open the Sylink.xml file for details of the SEP Manager IP's / Hostnames.
The issue I've run in to in the past is, upgrades will sometimes get corrupted and the new versions shows as installed, but you can't launch the client or LU. I'd like to remove everything in a previous step and then install it fresh second.
Posted on 10-04-2016 04:17 PM
Unfortunately some versions of SEP don't allow an in place upgrade, so in the past what I've done is created a package that copies the Uninstaller into a known location, and then have a script that runs it:
#!/bin/sh
open -a /Applications/Symantec Solutions/Symantec Uninstaller.app
Then I put this into Self Service, have the end user run it and restart, and then you can run the silent install (but of course also requires a restart).
Not the most elegant, I know.
Posted on 10-05-2016 07:36 AM
for removing SEP try this https://jamfnation.jamfsoftware.com/discussion.html?id=21364
to install just one SYlink :here is how you drop a SyLink.xml use this app:
/Library/Application Support/Symantec/SMC/tools/SyLinkDrop.app
it will pop up to get the file and do it for you. otherwise its much simpler to do this:
To install SEP silently
Take the DMG from Symantec and drop it (Copy the content ) into a new folder on your desktop.
drop your SyLink.xml file in your additional resource folder.
launch the Symantec Endpoint Protection Installer under the Tools menu there is a Create remote deployment package that you can deploy with Casper.
this will do a silent install but YOU MUST reboot.
Posted on 10-05-2016 07:51 AM
OK, I thought that had to be done from the SEP management console. I was able to package it, and it looks like it's showing up as managed like it should be. Thanks!
Posted on 10-05-2016 08:58 AM
We were successful in deploying the upgrade using the SEP Manager instead of JAMF today. The security team is pushing the upgrade to a few more Mac workstations today after the successful deploying from the SEP Server to the Mac clients.
Posted on 10-05-2016 10:24 AM
I've always packaged up the files in the "Additional Resources" folder, put them in a temp location, and installed the SEP.mpkg package with a postflight script. As long as all the other files are in the same folder as it, the installation goes smoothly. You definitely need to reboot afterwards unless you are OK with AV not working until the system naturally reboots.