Config Mgr 2012 Endpoint Protection: Definition Updates
Back to Endpoint Protection menu
Back to ConfigMgr 2012 menu
We previously installed the SCEP 2012 client on the devices in our test collection. Now we must ensure that the definition files remain up-to-date on these clients. We do this by integration with the software updates component of ConfigMgr.
We have already configured the Software Update Point to deliver Windows and Office software updates to our endpoints. We will now extend this functionality.
Navigate to Administration > Site Configuration > Sites.
Select your Site and click "Configure Site Components" on the ribbon above. Choose Software Update Point.
Navigate to the Classifications tab.
Choose Definition Updates.
Navigate to the Products tab and choose Forefront Endpoint Protection 2010 (the catalog has not yet been updated to be called SCEP 2012). Click Apply and OK to complete the configuration.
Now manually synchronise with the Microsoft catalog to download the latest definition files. Navigate to Software Library > Software Updates > All Software Updates.
Right click and choose "Synchronise Software Updates". Monitor the download using wsyncmgr.log.
See FEP 2010 chosen and sync starting.
See Definition updates being synchronised and process completing.
See Definition Updates now available in the console (filter by FEP 2012).
We will now create an Automatic Deployment Rule so that the definition updates can be downloaded and deployed automatically. We don't want to have to do this manually each week.
Navigate to Software Library > Software Updates > Automatic Deployment Rules
Right click and choose to "Create Automatic Deployment Rule"
The Create Automatic Deployment Rule Wizard starts. Enter a Name for the rule and then choose a collection (I have used my test collection). Leave the default "Add to an existing Software Update Group".
Make sure that the "Enable the deployment after the rule is on" is checked. Click Next to continue.
Choose defaults and click Next to continue.
Add Property Filters - Product and Update Classification. Choose FEP 2010 and "Definition Updates or Updates". Click Next to continue.
Choose to run the rule after any SUP sync. Click Next to continue.
Choose "As soon as possible" as the deadline. We want the definition updates to be applied immediately. Click Next to continue.
Click Next.
Click Next.
Click Next.
Choose to create a new deployment package. The source folder must exist and be empty. Click Next to continue.
Choose DP and click Next.
Click Next.
Choose your language and click Next.
Review the summary and click Next to create the ADR.
The ADR has been created. Click Close to exit the wizard.
Note the User Experience configuration for the ADR - I want to see what's going on in my test.
The ADR is configured to run automatically after each scheduled synchronisation but let's run it now for the sake of testing. Right click the rule and choose "Run Now".
Click OK to the pop-up message and the rule is now running.
Monitor progress using the ruleengine.log file. See the rule starting.
See deployment package folder being populated.
Content being downloaded.
Software Update Group does not exist so the rule creates it.
See the Software Update Group.
and the contents of the SUG.
Navigate to Monitoring > Deployments
Look at the progress of the ADR.
Our test client has received the deployment.
Verify the "before and after" definition files on the client.
Back to ConfigMgr 2012 menu
We previously installed the SCEP 2012 client on the devices in our test collection. Now we must ensure that the definition files remain up-to-date on these clients. We do this by integration with the software updates component of ConfigMgr.
We have already configured the Software Update Point to deliver Windows and Office software updates to our endpoints. We will now extend this functionality.
Navigate to Administration > Site Configuration > Sites.
Select your Site and click "Configure Site Components" on the ribbon above. Choose Software Update Point.
Navigate to the Classifications tab.
Choose Definition Updates.
Navigate to the Products tab and choose Forefront Endpoint Protection 2010 (the catalog has not yet been updated to be called SCEP 2012). Click Apply and OK to complete the configuration.
Now manually synchronise with the Microsoft catalog to download the latest definition files. Navigate to Software Library > Software Updates > All Software Updates.
Right click and choose "Synchronise Software Updates". Monitor the download using wsyncmgr.log.
See FEP 2010 chosen and sync starting.
See Definition updates being synchronised and process completing.
See Definition Updates now available in the console (filter by FEP 2012).
We will now create an Automatic Deployment Rule so that the definition updates can be downloaded and deployed automatically. We don't want to have to do this manually each week.
Navigate to Software Library > Software Updates > Automatic Deployment Rules
Right click and choose to "Create Automatic Deployment Rule"
The Create Automatic Deployment Rule Wizard starts. Enter a Name for the rule and then choose a collection (I have used my test collection). Leave the default "Add to an existing Software Update Group".
Make sure that the "Enable the deployment after the rule is on" is checked. Click Next to continue.
Choose defaults and click Next to continue.
Add Property Filters - Product and Update Classification. Choose FEP 2010 and "Definition Updates or Updates". Click Next to continue.
Choose to run the rule after any SUP sync. Click Next to continue.
Choose "As soon as possible" as the deadline. We want the definition updates to be applied immediately. Click Next to continue.
Click Next.
Click Next.
Click Next.
Choose to create a new deployment package. The source folder must exist and be empty. Click Next to continue.
Choose DP and click Next.
Click Next.
Choose your language and click Next.
Review the summary and click Next to create the ADR.
The ADR has been created. Click Close to exit the wizard.
Note the User Experience configuration for the ADR - I want to see what's going on in my test.
The ADR is configured to run automatically after each scheduled synchronisation but let's run it now for the sake of testing. Right click the rule and choose "Run Now".
Click OK to the pop-up message and the rule is now running.
Monitor progress using the ruleengine.log file. See the rule starting.
See deployment package folder being populated.
Content being downloaded.
Software Update Group does not exist so the rule creates it.
See the Software Update Group.
and the contents of the SUG.
Navigate to Monitoring > Deployments
Look at the progress of the ADR.
Our test client has received the deployment.
Verify the "before and after" definition files on the client.
No comments:
Post a Comment