For more information about fortifying an Exchange environment against e-mail transmitted viruses and worms, see "Slowing and Stopping E-Mail Viruses in an Exchange Server 2003 Environment" (
Anti-virus software can, when the virus definition file is kept current, automatically find and remove viruses and other malware.
The SEP manager updates are incremental, and smaller than the ones downloaded from the Live Update server.
To dive deeper into SEP policy configuration, have a look at these articles on application control rules, location awareness, Group Update Provider and even best practices for Quick Books. Unlike antivirus, IPS scans network traffic and identifies methods used to break malicious files into your network.
Make sure you review the benefits of upgrading to the latest version of SEP 12.1.x, and check out Symantec’s Help diagnostic tool to determine if your system meets the minimum requirements.
There are a lot of moving parts to admin work, so here is a list of Symantec’s guides to content revision configuration, server certificate updates, GPO, testing authentication, central deployment, Live Update, and clients with both SEP and Data Loss Prevention: If your users do not use a VPN, you should change the Live Update policy setting to use the default Symantec Live Update server – this allows remote clients to update any time they connect to the Internet.
Installation is a big topic, so I encourage you to read Symantec’s Top 10 SEP installation best practices.By following these recommendations, you can achieve better performance, scalability, reliability, and uptime.For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at Also, tune the scheduling frequency down to one hour.
For all other locations, make sure you use the SEP Manager to distribute product software and content updates.Symantec Endpoint Protection should automatically enable itself upon installation.