Gaining Visibility and Control over Symantec Endpoint Protection Clients

Blue Medora Agent for Symantec Endpoint Protection extends the value of customers’ existing IBM Tivoli Monitoring (ITM) infrastructure by providing a view of events generated by Symantec Endpoint Protection and Symantec AntiVirus Corporate Edition. This results in less complexity, more uniform operations management, and a significant reduction in costs due to the elimination of redundant infrastructure and multiple platform-specific tools.

The Blue Medora Agent for Symantec Endpoint Protection improves your ability to:

•  Monitor for virus infections
•  Monitor for Symantec LiveUpdate failure
•  Monitor for interrupted virus scans
•  Monitor when key processes die or have been terminated by the user
•  Monitor the age of the shared definition file

 Key features of Blue Medora Agent for Symantec Endpoint Protection include:

• Symantec Endpoint Protection Dashboard Status – A one-stop shop based on Tivoli Enterprise Portal (TEP) that allows administrators to easily determine the overall health and status of critical Symantec Endpoint Protection/Corporate AntiVirus operating system processes and alerts.

• Availability Monitor – Real-time detection of Symantec Endpoint Protection/Corporate AntiVirus availability via monitoring of key processes.

• Log Monitors – Detection and reporting of events found in the Symantec Endpoint Protection/Corporate AntiVirus log files and the Windows Event Log.

• Take-Actions – ITM Take-Actions that allow administrators to manage their Symantec Endpoint Protection/Corporate AntiVirus clients remotely via remote stop and start of key Symantec services.  The Take-Action can be combined with ITM Situations and Policies in automated workflows to perform actions such as sending an alert to the administrator or automatically restarting the Symantec AntiVirus engine if it dies or is stopped.

• Situations – ITM Situations specific to Symantec Endpoint Protection/Corporate AntiVirus that allow administrators to quickly and efficiently isolate impending or existing critical errors in their Symantec Endpoint Protection/Corporate AntiVirus environment, along with expert advice based on industry best practices on how to remedy the problem.

The Blue Medora Agent for Symantec Endpoint Protection has been designed from the ground up to look, feel, and operate like existing IBM-developed ITM agents in terms of ITM remote deployment, manageability via ITM command-line utilities, and installation and configuration.

Blue Medora Agent for Symantec Endpoint Protection:

• Takes advantage of ITM's Tivoli Enterprise Portal (TEP) visualization capabilities to include best practices, expert advice, customized workspaces, and historical data gathering
• Integrates with Tivoli Data Warehouse (TDW) to provide ITDS-focused historical data collection and analysis
• Provides the ability to send application-specific events to the Tivoli Enterprise Console (TEC) and Netcool OMNIbus for advanced correlation and automation
  

Versions of Symantec Endpoint Protection and Symantec Antivirus Corporate Edition Supported

• Symantec Endpoint Protection 12.0
• Symantec Endpoint Protection 11.0
• Symantec AntiVirus Corporate Edition 10.x
• Symantec AntiVirus Corporate Edition 9.x
• Symantec AntiVirus Corporate Edition 8.x
• Norton AntiVirus Corporate Edition 7.5

Versions of IBM Tivoli Monitoring Supported

• IBM Tivoli Monitoring V6.2.1 IF2
• IBM Tivoli Monitoring V.6.2.2

Operating System Support

• Windows 2003 Server SE (32 bit) with Service Pack 1 or higher
• Windows 2003 Server EE (32 bit) with Service Pack 1 or higher
• Windows 2003 Server (64 bit) with Service Pack 1 or higher
• Windows 2003 Server EE (64 bit)
• Windows Server 2003 Datacenter Edition
• Windows Server 2008 SE (32 bit)
• Windows Server 2008 EE (32 bit)
• Windows Server 2008 SE (64 bit)
•  Windows Server 2008 EE (64 bit)
• Windows Server 2008 Data Center
• Windows Server 2008 Data Center (64 bit)

Requirement for pre-existing ITM agent

To install any Blue Medora ITM Agent you must have at least one pre-existing IBM published agent installed.  Blue Medora Agents  do not include key IBM specific Java",  IBM GSkit, or the IBM Tivoli Monitoring runtime libraries. Installing an IBM-provided agent (normally the OS agent) installs these required elements.