Updating symantec endpoint protection
You can configure Configuration Manager software updates to deliver definition updates to client computers.
This is done by configuring automatic deployment rules.
Before you begin to create automatic deployment rules, make sure that you have configured Configuration Manager software updates.
For more information, see Software Updates in Configuration Manager.
You need to migrate to Symantec Endpoint Protection 12.1 Release Update 5 (12.1.5).
Note: If no previous versions of these products are already installed, read one of the following guides for installation instructions: Migration from Symantec Anti Virus 10.x or Symantec Client Security 3.x is not supported.
You can configure clients to download definition updates from the Microsoft Malware Protection Center.
This option is used by Endpoint Protection clients to download definition updates if they have not been able to download updates from another source.
A previous version of Symantec Endpoint Protection (SEP) 12.x or 11.x exists on the network or on individual computers.When you select to download definition updates from Microsoft Update, clients will check the Microsoft Update site at the interval defined in the Definition updates section of the antimalware policy dialog box.This method can be useful when the client does not have connectivity to the Configuration Manager site or when you want users to be able to initiate definition updates.Use the following procedures to configure WSUS as a definition update source.
Endpoint Protection definition updates must be approved and downloaded to the WSUS server before they are offered to clients that request the list of available updates.This will configure WSUS to automatically approve Endpoint Protection definition updates downloaded by WSUS.