The Symantec Endpoint Protection 14.x: Maintain and Troubleshoot course is designed for the IT security management professional tasked with troubleshooting Symantec Endpoint Protection 14.x. Students learn how to troubleshoot installations, monitor and troubleshoot the SEPM, client-to-SEPM communication, content distribution, client deployments, and protection technologies. The class also covers how to follow Symantec best practices for remediating a virus outbreak, automating functionality with REST APIs, and integrating Symantec Endpoint Protection with 3rd party applications
Who Should Attend
This course is for IT and system administration professionals who are charged with planning and installing a Symantec Endpoint Protection environment.
This course includes practical hands-on exercises, interactive games, and demonstrations that enable you to test your new skills and begin to use those skills in a working environment.
You must have attended Symantec Endpoint Protection 14: Configure and Protect or have relevant experience maintaining a SEP environment, including basic troubleshooting
By the completion of this course, you will be able to:
- Monitor, maintain, and troubleshoot a Symantec Endpoint Protection environment.
- Upgrade the Symantec Endpoint Protection environment.
- Use best practices when troubleshooting and remediating a virus outbreak.
- Automate functionality with Rest APIs and integrate Symantec Endpoint Protection with 3rd party applications
- Course overview
- The classroom lab environment
Troubleshooting Techniques and Tools
- Use a systematic approach for problem solving.
- Describe Symantec and third-party troubleshooting tools and how they are used.
- Know which SEPM and SEP client logs to research when troubleshooting specific issues.
- Use the Symantec Knowledge Base and interact with Symantec Technical Support.
Troubleshooting the Console
- Describe the components that make up the Symantec Endpoint Protection Manager.
- Describe SEPM services and their roles.
- Troubleshoot problems related to the SEPM services that prevent you from logging onto the console.
- Describe the database configuration and connection methods.
- Configure email to enable an administrator to reset passwords and know where to check administrator permissions.
Installation and Migration Issues
- Troubleshoot and resolve a failed Symantec Endpoint Protection Manager installation.
- Troubleshoot and resolve a failed Symantec Endpoint Protection for Windows client install.
- Troubleshoot and resolve a failed Symantec Endpoint Protection for Mac client install.
- Troubleshoot and resolve a failed Symantec Endpoint Protection for Linux client install.
Client Communication Issues
- Identify the interactions between the client and the SEPM.
- Identify heartbeat process.
- Locate and configure debug logs for client communication issues.
- Describe communications issues from the client perspective.
- Identify Linux and Mac communication issues.
Content Distribution Issues
- Troubleshoot and resolve LiveUpdate issues on the SEPM and client.
- Troubleshoot and resolve issues between a client and management server.
- Troubleshoot and resolve issues from clients who retrieve updates from a Group Update Provider.
Extending the SEP infrastructure
- Describe how data is transferred during replication and know which replication logs are affected.
- Automate functionality with Rest APIs.
- Integrate Symantec Endpoint Protection with third party applications.
Responding to a Security Incident
- Identify and examine useful SEPM reports for incident response.
- Learn the best approach for handling a virus outbreak.
- Identify and submit false positives to Symantec.
- Assess SEP performance using sizing and scalability recommendations.
- Optimize performance for the SEPM.
- Optimize performance for the SEP client.
- Utilities and other resources.
- Case studies