Quick-start checklist

HOWTO124328

Last Updated August 29, 2019

Complete the following tasks to set up your company environment.

Enroll devices
Create user accounts
Evaluate your security needs
Configure support for mobile devices

Enroll devices

To complete the product setup and protect your devices from threats, you must enroll your devices in SEP Cloud. As an administrator, you can enroll your own devices, devices that you prepare for other users, and servers.

See Supported devices.

To self-enroll a device	Sign in to SEP Cloud from the device you want to enroll, and follow the on-screen instructions. See Device enrollment overview.
To invite users for device enrollment	Go to the next task.
To create a redistributable package to enroll Windows desktops or servers.	Create a Windows installation package. See Deploying a Windows installation package.
To discover devices to enroll	Set up device discovery and enroll unmanaged Windows devices. See About device discovery and push enrollment .

As devices complete the enrollment process, data starts to appear on the dashboard. You can go to the dashboard now and start monitoring your environment.

Create user accounts

When you create user accounts for your employees, users receive an email that invites them to create their password and enroll their own devices in SEP Cloud. You can create users in SEP Cloud or sync to users in a supported cloud identity provider.

See SEP Cloud end user experience.

Do you want to sync users from your identity provider?

Yes

Configure your identity provider.
See Configuring an identity provider.
All imported users are added to the default group and assigned the User role.
If you created multiple groups, move users to other groups as needed.
If you want some users to be administrators, find them and change their role.

Create users in SEP Cloud

See Creating user accounts.

Evaluate your security needs

In SEP Cloud, security policies are always applied to groups, and all users and devices in a group inherit the policy settings. SEP Cloud comes with a default security policy that is applied to a default group. This may be all you need to meet your security requirements.

See Understanding security policies.

But in some cases, you may need to customize your protection. For example:

Some of your users have different security needs.
If so, create new policies and groups to accommodate them.
You want to use encryption.
The default security policy cannot be modified, and encryption is disabled in it. So to use encryption, create and configure a new security policy.
You want to manage protection of your servers independently.
If so, create a separate policy and group for your servers.

Do the default policy and group meet your needs?

Yes	Go to the next task.
No	Do the following as appropriate and then go to the next task: Create additional security policies. See Configuring security policy settings. Enable encryption management in one or more security policies. See Encryption management. Create additional groups and apply the policies to them. See How groups manage policy flow.

If your subscription includes support for mobile devices, you can create policies to control access to company resources from mobile devices.

See Managing access to company assets and resources.

Do you want to control user access to company resources?

Yes	Do the following as appropriate: To control access to company email, create an email access policy and apply it to all applicable groups. See Configuring email access policy settings. To control access to a wireless network, create a wireless access policy and apply it to all applicable groups. See Configuring wireless access policy settings.
No	Go to the next task.

Configure support for mobile devices

Modern devices require varying levels of configuration for full support. All mobile devices require Mobile Device Management (MDM), and some mobile operating systems have additional requirements.

If your subscription includes support for mobile devices, MDM is enabled by default in SEP Cloud. No MDM setup is required.

But if you already use a third-party MDM tool for mobile device management, you can disable the built-in Symantec MDM.

Do you want to configure SEP Cloud to work with a third-party MDM tool?

Yes

Confirm that your MDM tool is supported, and then set it up.

See Mobile Device Management.

Warning:

If you disable Symantec MDM, the MDM profile is removed from the enrolled devices, and the MDM-related features are no longer supported.

Complete the following OS-specific tasks before enrolling these device types:

To manage OS X or iOS devices, create an Apple Push Notification service (APNs) certificate.
See Apple certificate management.
To streamline the enrollment of Windows 10 devices, create the appropriate records on your DNS server.
See Using Autodiscovery to simplify Windows 10 enrollment.

See Release notes

Legacy ID: v109539687_v101064224

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

Quick-start checklist

Description

Enroll devices

Create user accounts

Evaluate your security needs

Configure support for mobile devices

Was this Article Helpful?

Quick-start checklist

Description

Enroll devices

Create user accounts

Evaluate your security needs

Configure support for mobile devices

Subscribe To This Article

Related Products

Was this Article Helpful?