Anmelden
 
HomeLibraryDownloadsSupportWebcasts & EventsCommunityForenBlogs
Ressourcen für IT-Professionals >
> 
> 
Integrating FEP 2010 with SCCM 2007 R3

Proposed Integrating FEP 2010 with SCCM 2007 R3

Alle Antworten

  • Montag, 20. Juni 2011 19:47
     
     
    Anmelden
    1

    Is this the only way to automate the download and distribution of the latest definition throught SCCM?

     

    Hi,

    You can use the WSUS based method http://technet.microsoft.com/en-us/library/gg412502.aspx

    Bechir Gharbi | http://myitforum.com/cs2/blogs/bgharbi/ | Time zone : GMT+1
     
  • Dienstag, 21. Juni 2011 06:24
     
     
    Anmelden
    0

    Thanks Bechir,

    Only a question, with this method, the distribution is automatically deployed to FEP Clients? Or I have to create a update package in SCCM and assign it to a collection? The deployment is made through SCCM?

    Talking about the error in the script, i think that the problem is coming on the scheduled task, because the URL that fails is working fine if i put it in a Internet explorer Window, but when it's executed in a script it fails... any idea?

    Thanks in advance,

     

    Monguitronik
     
  • Dienstag, 21. Juni 2011 12:47
     
     
    Anmelden
    0

    Hi,

    Through the WSUS method the updates deistribution is automatically. Personnaly I never tried the scheduled task method.

    Bechir Gharbi | http://myitforum.com/cs2/blogs/bgharbi/ | Time zone : GMT+1
     
  • Samstag, 31. März 2012 18:54
     
     
    Anmelden
    0

    nice pic bechir

    hello exarchbcn

    silly question : do you deploy FEP rollup1, that is required to use the tool to do the automatic FEP definition updates from SCCM

    i wont recommend you anything what to use either WSUS or SCCM for FEP definition updates i mostly prefer and use WSUS Server to push the automatic definition updates on all the systems that has either FEP or Forefront client Security.

    WSUS is the easiest method from my perspective to push the definition updates automatically to clients.

    Syed Kasif

     
  • Montag, 2. April 2012 07:14
     
     Vorgeschlagene Antwort
    Anmelden
    0

    hello

    you can create a auto approval rule, wsus console in SCCM server. this does not change your current software update configurations. i'm currently using this with 500 computers and its works without any concern.

    Configuring Update Synchronization

    You must configure Software Updates in Configuration Manager to synchronize the appropriate updates for the FEP client.

    To synchronize FEP definition updates in Configuration Manager

    1.        In the Configuration Manager Console, in the tree, expand Site Management, expand the site name, expand Site Settings, and then click Component Configuration.
    2.         In the details pane, right-click Software Update Point Component, and then click Properties.
    3.        On the Classifications tab, ensure that the Definition Updates check box and the Updates check box are selected.
    4.         On the Products tab, ensure that the product Forefront Endpoint Protection 2010 check box is selected, and then click OK.

    You should also set an Automatic Approval rule for definition updates and FEP updates, which configures WSUS to automatically approve for install any definition updates or FEP updates downloaded by WSUS.

    To configure an automatic approval rule

    1.        In the WSUS Administration console, click Options, and then click Automatic Approvals.
    2.         On the Update Rules tab, click New Rule.
    3.        On the Add Rule dialog box, under Step 1: Select properties, select the When an update is in a specific classification check box.
    4.        Under Step 2: Edit the properties, click any classification.
    5.        Clear all check boxes except Definition Updates, and then click OK.
    6.        On the Add Rule dialog box, under Step 1: Select properties, select the When an update is in a specific product check box.
    7.        Under Step 2: Edit the properties, click any product.
    8.        Clear all check boxes except Forefront Endpoint Protection, and then click OK.
    9.        In the Step 3: Specify a name box, enter a name for the Forefront Endpoint Protection Definition Updates rule, and then click OK.
    10.    In the Automatic Approvals dialog box, make sure that the newly create rule Forefront Endpoint Protection 2010 Definition Updates check box is selected and then click Run rule.

    http://technet.microsoft.com/en-us/library/gg398036.aspx


    Asitha