This document discusses the features and abilities of Symantec Endpoint Protection Small Business Edition cloud (SEP SBE).
Features of SEP SBE cloud
SEP SBE cloud management console:
The SEP SBE cloud management console is stored on Symantec servers. It is the centralized portal for managing all policies, computer status updates, definitions, and client software updates. This takes the place of the Symantec Endpoint Protection Manager (SEPM) in previous versions and On Premises installations. Relocating this management component to the cloud allows for fewer necessary resources locally in the environment.
Clients require a good constant Internet connection to remain active, receive policy changes and to update definitions.
Clients installed on workstations automatically update the protection software installed. Server clients receive automatic program updates on a less frequent basis.
The SEP SBE cloud management console has many sections the first being the "Home" tab, which offers a quick overview of the latest news, threats, and health status of the environment.
The Home tab is an easy to read summary page of the following features:
Computers Health status showing all systems as either Green, Yellow, or Red.
A news alert window with the newest information regarding services and features for SEP SBE cloud.
A few security summary windows that notify administrators of the latest virus infections, firewall detections, and intrusion attempts on the network.
A quick tasks option is shown for the most commonly used tasks.
A latest threats window to educate administrators about the names of the most detected viruses globally and the local environment's current protection against them.
The computers tab located in the top navigation bar will have all computers and groups created listed in an easy to read format. This allows administrators to manage computers and groups by role, location, duty, etc.
The default view shows all systems currently with SEP SBE cloud installed
The Group section is on the left and allows for creating groups based on whatever criteria are desired for administration of the environment. We recommend groups be created based on location or subnet for ease of management.
The computer tab also has separate list views of all computers considered to be in "Good", "Needs Attention", "At Risk", "Needs Restart" and "Needs Update".
The Policies tab located on the navigation bar gives administrators a way to customize Symantec settings to environmental or individual computer requirements. This tab gives allows for the ability to customize schedules and settings for SEP SBE clients.
The systems policy allows for customizing proxy settings and LiveUpdate settings.
The Endpoint Protection policy has several options available for customizing settings to needs of users, software and the environment.
Computer Protection: Allows for customization of what protection technologies are active on clients.
USB Device Control: Allows or blocks removable USB storage devices.
Web Protection: Allows control over our Internet security components which include Browser Protection, Safe Surfing, and Download Intelligence.
Network Protection: Primarily our Smart Firewall and Intrusion Prevention components, which administrators can customize to ensure applications can communicate properly.
A easy to setup a scan schedule so servers or all clients can receive a daily or weekly full scan.
The users tab found in the SEP SBE cloud management console is where the primary account administrator will manage all other administrator and users who can access the online portal. Permissions and contact information for new and existing admins can be added, deleted, or changed from this tab.
Add administrators and users who can receive alerts and change settings on the portal
Create customized alert preferences for each individual administrator based on threats, services, or general alerts
The ability to limit or add which product each administrator can access and administer if using multiple Symantec.cloud products
The SEP SBE cloud management console offers reporting to help keep you informed on the security status of the computers in your environment.
Reports are available on-demand or can be scheduled and emailed to administrators
Reports generated are available in PDF, HTML, and XML formatting
Both general reports and Endpoint specific reports are available
Computer Status Summary
Mac Computer Summary
Endpoint Protection Reports:
The subscriptions tab allows you to add more services if you need or to extend the services you already have. It is also where you can download SEP SBE On-Premise Edition (end of life).
Easily extend or buy more license seats through the Hosted Endpoint Portal
Download the On-Premise version of SEP SBE through the portal
Easily add newly acquired serial numbers with a click of a button
SEP SBE cloud offers a feature called a Live Update Host. This allows a machine to be configured to provide definition and content updates to the computers on the same subnet and location. This is especially useful in environments with limited external bandwidth to the Internet.
Cloud Managed Vs. On Premises Managed Comparison Chart
On Premise Manager
Cloud Hosted Portal
Hosted by Symantec
Hosted on Local Server (On-Premise System Requirements)
Client Security Summary on Home Page
News, Current Threats, Protection Status on Home Page
Several Report Types: Status, Network, Risk, Scan, Firewall - several sub categories
Reports Available on Manager and Email
.PDF, .HTML, .XML
Separate Polices for Virus Settings, Firewall, Intrusion Prevention, Exclusions, and LiveUpdate - Has more options available to turn settings on or off
Centralized Single Policy Page Containing: AV, Firewall, USB Device Control, Exclusions, etc.
Computers Tab: View all Symantec protected systems
A group structure based view that allows the admin to separate clients by location, subnet, roles, etc.
Admin and Users Tab
Manage Additional Admin Accounts
On-Premise and Cloud Managed Clients:
Basic Protection Installation Option Available: Anti-Virus Component Only
Full Protection Including All Protection Components
Full Protection with the Addition of Safe Surfing
Default Server Install Package - has all protection components installed except the Firewall.
LUH - Live Update Host. Designates a system to download engine updates and virus definitions. Other systems in the same location or subnet then download from that machine to reduce network traffic.
Auto-update of most protection related software
Imported Document ID: TECH214955
Subscribing will provide email updates when this Article is updated. Login is required.