Endpoint Protection training

Products

• Endpoint Protection

Issue/Introduction

 

Resolution

Symantec Education Services provides a full range of training solutions to help you maximize your use of Symantec Endpoint Protection (SEP),such as, Instructor Led Training, the Symantec eLibrary, and Certifications.

Instructor Led Training provides the best in class course content and hands-on labs in a working environment allow you to learn and practice at the same time. Expert mentoring from our highly skilled instructors is at your side throughout your class. The shared peer to peer experience occurring spontaneously in live training is invaluable.

Symantec eLibrary provides members access to regularly updated on-demand, web-based training modules covering installation, configuration, deployment, administration, maintenance, and troubleshooting of Endpoint Protection in detail. The eLibrary is ideal for supplementing classroom training, accessing as a just-in-time reference, or providing training to those who cannot travel or afford time away from the office.

Certifications validate technical knowledge and competency by becoming a Symantec Certified Specialist (SCS) based on your specific area of Symantec technology expertise.

---

This section provides Endpoint Protection resources for the Symantec eLibrary. Note that many of the recording topics align with instructor-led courses (live online as well as traditional classroom) which are offered quite frequently.

To learn more, visit the Symantec Education Services Course Catalog and subscribe to the Symantec eLibrary.

Endpoint Protection 15 training

Endpoint Protection 15.0 Fundamentals (Duration 01:30)

The Symantec Endpoint Protection 15 Fundamentals course is designed to provide IT professionals basic knowledge necessary to implement, manage, and troubleshoot Symantec Endpoint Protection version 15.

Endpoint Protection 15.0 Differences (April 2019)  (Duration: 00:22)

This module covers new SEP 15 features since its initial release in November of 2018.

Endpoint Protection 15.0 Differences (Nov 2018)  (Duration: 00:22)

This module covers the new features in the new cloud-based endpoint protection solution.

Endpoint Protection 14 training

SEP 14.x Configure and Protect

SEP 14: Securing Endpoints Against Network-Based Attacks (Duration: 01:45)

In this module, you learn how Symantec Endpoint Protection protects each layer of the network stack, discover tools and methods used by attackers, and describe the stages of an attack. You also learn how to prevent network attacks using the Symantec Endpoint Protection client firewall and block threats using Intrusion Prevention. In addition, you learn how Intrusion Preventions' Generic Exploit Mitigation blocks SEHOP attacks.

SEP 14: Securing Endpoints Against File-Based Threats (Duration: 01:15)

In this module, you analyze the different threat types including Advanced Persistent Threats and discover how attackers disguise their malicious applications. You also learn how Symantec Endpoint Protection uses a layered security approach to protect against file-based threats. In addition, you learn how Symantec Endpoint Protection protects endpoints using the Intelligent Threat Cloud Service and how to secure Windows, Mac, and Linux clients.

SEP 14: Controlling Endpoint Integrity and Compliance (Duration: 01:20)

In this module, you learn how to ensure that clients are in compliance with your company's security policy using Host Integrity. You also learn how to control application and file access with Application Control and restrict device access with Device Control. Finally, you learn how to harden clients with System Lockdown's whitelisting or blacklisting features.

SEP 14: Enforcing Adaptive Security Posture (Duration: 00:30)

In this module, you learn how to create locations and assign policies to ensure the most restrictive policies are assigned when a user logs on from a non-corporate location. You also learn how to configure locations so when that same user logs on from a corporate location, a less restrictive set of policies are assigned. In addition, you learn how to create file and folder exceptions for different scan types.

SEP 14.x: Manage and Administer

SEP 14: Monitoring and Managing Endpoints (Duration: 02:00)

This module includes managing console access and delegating authority; managing client-to-server communication; managing client architecture and active directory integration; managing clients and responding to threats; monitoring the environment and responding to threats; and creating incident and health status reports.

SEP 14: Enforcing Content Updates on Endpoints using the Best Method (Duration: 01:05)

In this module, you analyze the content delivery system (LiveUpdate) and learn how to reduce bandwidth consumption using the best method to deliver content updates to clients. You also learn how to configure Group Update Providers and create location aware content updates. Also, you learn how to use Rapid Release definitions to remediate a virus outbreak.

SEP 14.x: Plan and Implement

SEP 14: Preparing and Delivering a Successful SEP Implementation (Duration: 01:40)

This module covers how to architect and size a Symantec Endpoint Protection environment, install the Symantec Endpoint Protection Manager (SEPM), benefit from a SEPM disaster recovery plan, and manage replication and failover.

SEP 14: Discovering Endpoint Client Implementation Methods and Strategies (Duration: 01:07)

This module covers client deployment methods for new Windows, Linux, and Mac endpoints as well as migration to SEP 14.

SEP 14.0: Maintain and Troubleshoot

SEP 14: Troubleshooting Techniques and Tools (Duration: 00:20)

Learn a systematic approach to troubleshooting and how to use Symantec and third-party troubleshooting tools.

Identify which logs to research when troubleshooting specific SEPM or SEP issues. Learn how to interact with Symantec Technical Support.

SEP 14: Troubleshooting the Console (Duration: 00:35)

Recognize the main SEPM processes, components, and ports.  Learn how to troubleshoot embedded and MS SQL database configurations. Identify can prevent logging onto the SEPM console.  Review how to reset the SEPM administrator password and check administrator permissions.

SEP 14: Installation and Migration Issues (Duration: 00:34)

Troubleshoot a Symantec Endpoint Protection Manager and Symantec Endpoint Protection Client for Windows, Mac, and Linux installations.

SEP 14: Client Communication Issues (Duration: 00:25)

Learn how clients communicate with the SEPM and the differences between Push and pull mode. Identify which files the client uses to communicate with the SEPM and restore communication when necessary. Monitor the client status using SEPM reports and the Client view.

SEP 14: Content Distribution Issues  (Duration: 00:22)

Troubleshoot and resolve LiveUpdate issues for the SEPM and client. Troubleshoot and resolve content update issues between a client and management server. Troubleshoot and resolve Group Update Provider issues.

SEP 14: Extending the SEP Infrastructure (Duration: 00:24)

Describe how data is transferred during replication and know which logs are affected.  Automate SEPM functionality with REST APIs.  Integrate Symantec Endpoint Protection with third party applications.

SEP 14: Responding to a Security Incident (Duration: 00:22)

Identify and examine useful SEPM reports for incident response. Learn the best approach to handling a virus outbreak. Identify and submit false positives to Symantec. tending

SEP 14: Performance Issues (Duration: 00:20)

Assess SEP performance using sizing and scalability recommendations.  Optimize performance for the SEPM and SEP client.  Use Perfmon, SQL Profiler, Procmon, Wireshark, and SymDiag to identify the resource of performance issues.  Recognize the actions taken when dealing with performance issues.

Other

Endpoint Protection 14.2 RU1 Differences (Duration: 00:15)

In this module, you will learn about the changes and new product features available in Symantec Endpoint Protection 14.2 RU1. Topics include integration with Endpoint Threat Defense for Active Directory, new SEPM and SEP client features including added Platform Support and improved performance for Intrusion Prevention on servers.

What's New in Symantec Endpoint Protection 14.2 (Duration: 00:20)

In this module, you will learn about the changes and new product features available in Symantec Endpoint Protection 14.2 (SEP 14.2) Topics include Cloud Integration Enhancements, Multifactor Authentication, IPv6 Support, SEP Communication Module, Web Security Service (WSS) Integration, and Mac Client Updates.

What's New in Symantec Endpoint Protection 14.1 (Duration: 00:50)

In this module, you learn about the changes and new product features available in Symantec Endpoint Protection 14.1 (SEP 14.1) Topics include requirements and architecture, Security Cloud and the Security Cloud console, new cloud based policies, SEP 14 RU1 specific updates, and enrollment and product overview demonstrations.

What's New in Symantec Endpoint Protection 14 (Duration: 00:37

In this module, you learn about the changes and new features available in Symantec Endpoint Protection 14 (SEP 14). Topics include Windows client protection technologies, Mac improvements, SEPM features, architectural improvements, and Endpoint Detection and Response.

Migrating to Symantec Endpoint Protection 14 (Duration: 00:25)

In this module, you learn legacy systems and components no longer supported in Symantec Endpoint Protection 14. You become familiar with the recommended migration path and elements required for migrating the Symantec Endpoint Protection Manager and clients. Finally, you learn about the new Client Security Update content stream available.