The below article will show how can we install Symantec DLP Agent using Symantec Endpoint Protection Host Integrity module.
For this we need the below excutables and installers
* ORCA tool which is openly available.
* Symantec DLP agent installer packages.
- Open the DLP AgentInstaller file (.msi file) with ORCA.
- Choose 'Transform' menu, select 'New Transform'
- Select 'Property' under the 'Tables' list
- Choose 'Tables' menu, select 'Add Row':
- For the value of 'Property', type 'ENDPOINTSERVER', for the value of 'IP address of the DLP Server'.
- Click 'OK' to add this row to the 'Property' table.
- Choose 'Transform' menu, select 'Generate Transform'
- Save the MST file.
Create a batch file
- Create a batch file which is shown in the below.
- msiexec /i \\DLP\AgentInstall64.msi TRANSFORM=\\DLP\AgentInstall64.mst /q
- Here the .msi is the DLP msi file and .mst file is the one which was generated using ORCA. Both the files are stored in the shared path (\\DLP) which should be accessible from the all the given endpoints.
Create a HI profile in SEPM with the batch script
- Create an Host Intigity policy in SEPM.
- Add a statement by clicking Add -> Function -> Utility “Run a script”.
- Add the batch file as shown below. Uncheck the box “Show a new process window”. This will run the script in background.
- Add the Host Integrity policy to the SEPM policy for which you need to install the DLP agents.
How Does the Script Works
The batch Script calls the .msi and .mst files from the shared location and executes the files on the local machine.
You can verify edpa services if it is installed and running.
Thanks you