You can also update content on Symantec Endpoint Protection Manager with a file.
Download files to update definitions for Endpoint Protection Manager Additionally, if you use replication, you can replicate content and policies between the local site and the partner site. By default, Windows client computers get content updates from the management server.
Because the UI doesn’t allow the fall back options to be empty; How to create a file share for FEP definition is described here:
These null files are also beneficial in case deployment through the Update deployment fails for some reason.
For more information on deploying Forefront Endpoint Protection 2010 with Configuration Manager as well as how to create an Automatic Deployment Rule for Forefront Endpoint Protection 2010 antimalware definition updates, please see the following:
We can use the following FEP policy: Option “Updates from UNC file shares” has to be checked.
The content includes virus definitions, intrusion prevention signatures, and Host Integrity templates, among others.
See Making sure that Symantec Endpoint Protection Manager has the latest content.
If you have a single server install, highlight the server listed. In the ribbon at the top, click Configure Site Components and in the dropdown select Software Update Point. Select the Products tab and then place a check next to Forefront Endpoint Protection 2010. Review the Languages/Classifications tabs to ensure that the items selected in the Automatic Deployment Rules are also selected on the properties of the Software Update Point. There is no need to manually initiate a synchronization as Configuration Manager will detect a change (step 4 above) and automatically start a synchronization.
Note that this example is specific to Forefront Endpoint Protection 2010 antimalware definition updates, however the process applies to any Automatic Deployment Rule in System Center 2012 Configuration Manager.