Symantec Endpoint Protection 11.0 MR4: Administration

Course Description

This course provides system and network administrators with in-depth, hands-on training on administering Symantec Endpoint Protection 11.x. Topics include product components, planning the installation and deployment, performing an installation, understanding the database, creating users and groups, creating and administering antivirus policies, and intrusion and behavioral protection policies from the Symantec Endpoint Protection Manager (SEPM). Live Update, monitoring, reporting, and troubleshooting are also covered. The last two days of this course include how to write, deploy, and manage firewall policies.

Skills Gained

By the completion of this course, you will be able to: • Describe Symantec Endpoint Protection products, components, product dependencies, and the system hierarchy. • Install and configure Symantec Endpoint Protection management and client components. • Deploy Symantec Endpoint Protection clients. • Manage the client UI. • Manage antivirus and antispyware policies. • Configure TruScan Proactive Threat Scans. • Design a Symantec Endpoint Protection environment. • Monitor and maintain the Symantec Endpoint Protection environment. • Configure firewall and intrusion prevention policies. • Customize network threat protection.

Who Can Benefit

You must have working knowledge of advanced computer terminology, including TCP/IP networking terms and Internet terms, and an administrator-level knowledge of Microsoft Windows 2000/XP/2003 operating systems.

Prerequisites

You must have working knowledge of advanced computer terminology, including TCP/IP networking terms and Internet terms, and an administrator-level knowledge of Microsoft Windows 2000/XP/2003 operating systems.

Syllabus

COURSE OUTLINE
Introduction
• Course Overview
• The Classroom Lab Environment
Symantec Endpoint Protection Product Solution
• Why Use Symantec Endpoint Protection?
• Symantec Endpoint Protection Components
• Symantec Endpoint Protection Policies and Concepts
• Key Design Factors
Installing Symantec Endpoint Protection
• Identifying Hardware and Software Requirements
• Preparing Servers and Clients
• Installing the Symantec Endpoint Protection Manager
Managing Symantec Endpoint Protection
• Identifying Important SEPM Elements
• Starting and Navigating the Symantec Endpoint
Protection Manager
• Describing Policy Types and Components
• Describing SEPM and Console Communications
Deploying Clients
• Preparing for Client Deployment
• Choosing the Client Installation Method
• Installing Managed Clients
• Making Unmanaged Clients Managed
• Configuring Unmanaged Detector
• Scanning Clients
• Managing the User Environment
• Managing Groups, Policies, and Locations
Configuring LiveUpdate Policies
• Configuring LiveUpdate
• Configuring LiveUpdate for Clients
• Manually Updating Virus Definitions
Configuring Antivirus and Antispyware
Protection
• Introducing Antivirus and Antispyware Policies
• Configuring Auto-Protect Scans
• Configuring TruScan Proactive Threat Scans
• Configuring Administrator-defined Scans
• Quarantining Files
• Configuring Miscellaneous Settings
Active Directory Integration
• What Is Active Directory?
• How Is Active Directory Used?
• Working with Active Directory Integration
• Using Active Directory
Migrating to Symantec Endpoint Protection
• Migrating Legacy Symantec Antivirus Server and
Client
• Migrating to Symantec Endpoint Protection 11.04
• Describing Other Deployment Methods
Designing a Symantec Endpoint Environment
• Architecture and Sizing Considerations
• Designing the Architecture
• Determining Client-to-SEPM Ratios
• Content Distribution Methods
• SEPM and Database Sizing
• Completing the Deployment
Introduction to Network Threat Protection and
Application and Device Control
• Network Threat Protection Basics
• The Firewall
• Intrusion Prevention
• Application and Device Control
Configuring Firewall Policies
• Configuring Firewall Policy Elements
• Configuring Firewall Rules
• Configuring Smart Traffic Filtering
• Configuring Traffic and Stealth Settings
Managing Intrusion Prevention System (IPS) Policies
• Configuring IPS
• Managing Custom Signatures
Configuring Application and Device Control Policies
• Introducing Application and Device Control
• Creating Application and Device Control Policies
• Customizing Application and Device Control Policies
Customizing Network Threat Protection and Application
and Device Control
• Managing Locations
• Managing Policy Components
• Configuring Application Learning
• Configuring System Lockdown
Configuring Additional Protection
• Configuring Tamper Protection
• Configuring Centralized Exceptions
Monitoring and Reporting
• Viewing Summary Data
• Viewing and Managing Logs
• Configuring and Viewing Notifications
• Creating and Viewing Reports
Performing Server and Database Management
• Managing Symantec Endpoint Protection Servers
• Managing Server Security
• Communicating with Other Servers
• Managing Administrators
• Managing the Database
• Disaster Recovery Techniques
Installing Additional Management Components
• Installing Additional LiveUpdate Servers
• Installing and Configuring the Central Quarantine
• Expanding the Management Environment