VMware Horizon Community
Yikes1232011101
Enthusiast
Enthusiast

Symantec Enterprise Protection adds duplicate clients with instant clones.

I have instant clones setup with Horizon7.13 with Symantec SEP 14.3.  Every time a user logs off the IC, a new client is added to the Symantec Manager, which reports that we are over deployed.  Is there something that needs to be done in the golden image to not make this happen and having to manually daily delete the old clients in the manager?

 

Thanks

Reply
0 Kudos
7 Replies
Yikes1232011101
Enthusiast
Enthusiast

Thanks, I tried this and it is still creating duplicates once users log off of their instant clones.  

Reply
0 Kudos
Hmunning
Enthusiast
Enthusiast

Did you go through all the steps ? And did you apply this as well?

https://knowledge.broadcom.com/external/article/180552/prepare-endpoint-protection-clients-for.html

By the way, in our case, since one of the recent versions, the image exception tool did not work on Windows 10.

https://knowledge.broadcom.com/external/article/155238/about-the-symantec-virtual-image-excepti.html

Of course, if you run into problems you can create a case with the vendor Broadcom.

Yikes1232011101
Enthusiast
Enthusiast

Yes, all of 155835 has been applied.  I have run the ClientSideClonePrepTool.exe on the master image before shutdown as well.  Though I'm wondering with instant clones when it makes the template if this is negated when it boots it up.  The vie tool does not seem to exist with 14.3. 

 

I currently have a ticket open with Symantec as well and will see what happens.

Reply
0 Kudos
tschern
Contributor
Contributor

This link has a lot of the relevant info you need to set SEP up for instant clones, including adding a registry key to designate the clones as non-persistent for SEPM. This helps manage the license count.

https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endp... 

To your point about the 14.3 version of the vie tool not existing, I've attached it here.

Reply
0 Kudos
JohnTwilley
Hot Shot
Hot Shot

Even after setting all of this up, you will still see duplicates.  The Symantec Admin need to run a daily purge of the devices to clear it up.  We have 4,000 non-persistent VMs in a Hospital environment.  Our daily churn uses around 14,000 SEP licenses daily. 

It's just a flaw in the SEP license process.   Just want until you see the new Symantec 14.3 RU7 Cloud-based enrollment issues.

You now have to run SMC.exe -image instead of Clone prep.   Then you have to create a Schedule Task to ENROLL each VM...or a post-cloning script.  It's just a please to work with Symantec. <SC>

Reply
0 Kudos
bjohn
Enthusiast
Enthusiast

You must be doing something wrong?

SEP works fine for me with IC's.

Reply
0 Kudos