Software Management
Nuts and Bolts
Joel Smith & Rene Kolga
Sr. Principal Support Engineer – Sr. Product Manager
Software Management Nuts and Bolts
1
Presentation Agenda
1
Introduction
2
Managing the Software Catalog
3
Rules, Detection and Applicability
4
Complex Software Rollouts
5
Q&A
Software Management Nuts and Bolts
SYMANTEC VISION 2012
2
Introduction to Software Management
• What can Software Management do for you?
• Software Catalog
• What is a Software Resource?
• Intelligent Software Management
• Inventory Rules
• Reboots, Interruptions,
and other problems
• Managed Policies
• Tasks versus Policies
Software Management Nuts and Bolts
SYMANTEC VISION 2012
3
Managing the Software Catalog
• Populated by:
– Software Inventory
– Targeted Software Inventory
(detection checks)
– Data Providers
– Manual Creation
– Software Distribution
• Repository for:
–
–
–
–
–
–
–
–
Software Management Nuts and Bolts
Version and Product information
Software Packages
Command-lines
Applicability and Detection Rules
Associations
File Inventory
Software Portal definitions
Installed Software
SYMANTEC VISION 2012
4
Software Products
• Ties Duplicate or Similar
Resources together
Software Product
– Inventory Required
• Software Discovery
• Targeted Software Inventory
• Rollout completed
– Criteria
• Software Name
• Manufacturer or Company
• Software Version
• Integration with other functions
– Application Metering
– Software Deployment
– Licensing (requires Asset)
Software Management Nuts and Bolts
SYMANTEC VISION 2012
5
Inventory Rules – Detection, Applicability
Adding Intelligence to Software Management!
• Applicability Rules
– Does this Software apply to this target machine?
– Takes the logic away from filters and targets, and lets the policy ensure
proper applicability
– Logic: True equals Execute, False equals Exit
• Detection Rules
– Is this Software already installed?
– Takes the logic away from dynamic filters and targets
– Ensures continued compliance, reinstalls if software is removed
– Logic: True equals Exit, False equals Execute
Software Management Nuts and Bolts
SYMANTEC VISION 2012
6
Symantec Endpoint Protection Import
Demonstration
Software Management Nuts and Bolts
SYMANTEC VISION 2012
7
Managed Software Delivery Policy
• Setup Deployment and Management of your Software
• Features:
–
–
–
–
–
–
–
–
–
–
Policy based, held by the local Agent
Contains after-actions
Dynamic Scheduling – Prestaging Packages
Software Publishing of Policies
Give Ability for the User to invoke the Policy
Add additional tasks or Software Resources
Make use of Conditions
Avoiding Configuration mistakes
If Software is required, enforce it with a Policy!
End User Notifications (pre-launch, reboot) including Deferral options
Software Management Nuts and Bolts
SYMANTEC VISION 2012
8
Complex Software Rollouts
• Reboots, Restarts, and generally userdisruptive Software
– SQL 2008 Deployment (Link:
http://www.symantec.com/docs/HOWTO26108)
• Platform specific requirements
– 32 bit versus 64 bit
– Workstation versus Server
• Software Suites, multi-software
deployments
– Common Business Apps
– Adobe or Microsoft suites
• Vital Software
– Symantec Endpoint Protection
Software Management Nuts and Bolts
SYMANTEC VISION 2012
9
Symantec Endpoint Protection and MS
Office Policy Demonstration
Software Management Nuts and Bolts
SYMANTEC VISION 2012
10
Software Management Process (technical)
1.
Software Resource Creation
2.
Package Distribution to Package Servers (requires the PS Agent to obtain a new policy XML,
Get the Codebases, Download the Package, and send Package Status back to the NS)
3.
Inventory Data Gathered (this step may happen elsewhere in the process)
4.
Task or Policy Created that references the Resource
5.
Policy or Delta Resource Update runs to include the Policy in target system’s Client Policy XML
6.
Client receives the new Policy
7.
At the scheduled time the SMA tells the SMFAgent to execute the policy
8.
SMFAgent calls the IRMAgent to run the Detection and/or Applicability Rules, The IRM Agent
executes the Rules via the CTA
9.
The results are processed by IRM Agent, passed to SMFAgent, stop if not applicable or was
detected, or continues
10. The SMFAgent calls the SMA Transport Agent to get Package Codebases (download locations)
and to download the software
11. SMF Agent checks the Remediation schedule, if later, waits and periodically checks again,
otherwise continues
12. SMFAgent tells the SWM Sol Agent to execute, which it does by calling the CTA.
13. Results are sent back to the NS
Presentation Identifier Goes Here
SYMANTEC VISION 2012
11
…Questions?
Thank you!
Joel Smith & Rene Kolga
joel_smith1@symantec.com;
rene_kolga@symantec.com
Copyright © 2012 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in
the U.S. and other countries. Other names may be trademarks of their respective owners.
This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied,
are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.
Software Management Nuts and Bolts
12
Win the New iPad
(color subject to availability)
Discovery Starts Here
Get all Four QR Codes for a Chance to Win
Go to any of the four designated locations,
in any order, to get the discovery code.
Scan the QR code and enter your email
address.
3 Second Prize Winners (3 entries required)
5 Third Prize Winners (2 entries required)
For official drawing eligibility and rules
go to: discover.it-solutions-planning.com
SYMANTEC VISION 2012
DISCOVER