Endpoint Protection

Hello,

We currently have Endpoint Protection version 11.x.x running on Windows 2003 Server. We are trying to

upgrade to Endpoint Protection version 12.1.2 on a new Windows 2008 R2 server. What's the best upgrade

method?

The plan was to install version 12.1.2 on a new Window 2008 R2 server and then restore the backup  from

version 11. Can that be done since they are not same version?  Or do we have to install version 11 on the

new server first, restore the backup of the old SEP server, then upgrade to version 12.1.2?

You can upgrade 11.x to 12.1.2 than move 12.1.2 to a new server following this link:

How to move Symantec Endpoint Protection Manager 12.1 from one machine to another

That sound like a good migration method. I will try that. Thanks Brian

Hi,

First you can upgrade SEPM 12.1.2.

Check this artical 

https://www-secure.symantec.com/connect/articles/hot-move-sepm-one-server-another-server

Hi,

I guess the Replication Will be better option.

Replication Migration process

1. Install Symantec Endpoint Protection Manager on MACHINE_2. NOTE: The version installed to the new server must be the same version as on the old server. The new management console can be migrated to a newer version once the transition is complete.
2. In the Management Server Configuration Wizard panel, check Install an additional site, and then click Next
3. In the Replication Information panel, type values in the following boxes:
   1. Replication Server Name
      The Name or IP address of MACHINE_1
   2. Replication Server Port
      The default is 8443.
   3. Administrator Name
      The Username used to log on to the old console.
   4. Password
      The password used to log on to the old console.
4. Click Next
5. In the Certificate Warning dialog box, click Yes
6. In the Database Server Choice panel, do one of the following, and then click Next:
   Check Embedded database or Microsoft SQL server (whichever database type you'd prefer to install), then complete the installation.
7. Log in to the new SEPM on MACHINE_2 and ensure that all the clients and policies have Replicated successfully.
8. In the old SEPM on MACHINE_1, Click Policies > Policy Components > Management Server Lists > Add Management Server List
9. Click Add > Priority and a new Priority would get added named as "Priority2"
10. Add MACHINE_1 under Priority 2 and add MACHINE_2 under Priority 1, and assign this New Management Server List to all the groups.
11. Wait at least one replication cycle.
12. Stop the "Symantec Endpoint Protection Manager" and "Symantec Embedded Database" services on MACHINE_1 to verify whether all clients now report to the new SEPM on MACHINE_2
13. Once verified that all the clients are reporting into the new SEPM, and have moved away from the old one, proceed to the next step.
14. Delete the Replication Partner from MACHINE_2 SEPM: Click on the Admin button | Under Servers, Expand Replication Partners and select the partner to delete | Under Tasks, choose Delete Replication Partner | Type Yes when asked to verify deletion of the replication partner.
15. Delete the Remote Site for MACHINE_1 from MACHINE_2 SEPM: Click on the Admin button | Under Servers, Expand Remote Sites and select the site to delete | Under Tasks, choose Delete Remote Site. | Click Yes to verify deletion of the remote site.
16. After the successful Migration, uninstall SEPM from MACHINE_1.
     

Hi,

Thank you for posting your query in the Symantec forum.

I would like to answer following queries.

Q. The plan was to install version 12.1.2 on a new Window 2008 R2 server and then restore the backup  from version 11. Can that be done since they are not same version?

--> It's not possible due to database schema changes in SEP 12.1

Q. Do we have to install version 11 on the new server first, restore the backup of the old SEP server, then upgrade to version 12.1.2?

--> This is the correct method however if you could provide the following details we can guide more correctly.

1) Total number of SEPM's in the network?

2) Total number of Clients in the network?

3) If any GUP is configured & are there any remote sites?

4) Installed SEPM is with default policies or having custom policies as well?

I would request please go through the following thread.

https://www-secure.symantec.com/connect/forums/mov...

Check this article also: https://www-secure.symantec.com/connect/articles/h...

Hi Kojeiwa,

This new article (and the articles linked to it) may also be of interest:

Best practices for upgrading to Symantec Endpoint Protection 12.1.2
http://www.symantec.com/docs/TECH163700 
 

Hello,

In your case, you would be migrating the server OS as well as SEP 11.x to SEP 12.1.

Check these Threads which speaks on the same issue - 

https://www-secure.symantec.com/connect/forums/symantec-1106-121-migration-question

https://www-secure.symantec.com/connect/forums/migrating-sep-11-old-hardware-sep-12-new-server-hyper-v-vm

In your case - there are 2 scenarios - 

1. Upgrade the SEPM 11.x on the existing 2k8 32 bit server to SEP 12.1, then move the installation to the new 2k8 64 bit server by performing a disaster recovery.

How to move Symantec Endpoint Protection Manager 12.1 from one machine to another

http://www.symantec.com/docs/TECH171767

Symantec Endpoint Protection 12.1: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?page=content&id=TECH160736

OR

2. Move the installation of SEPM 11.x from the existing 2k8 32 bit server to the new 2k8 64 bit server, then upgrade it to SEP 12.1 after it's moved.

How to move Symantec Endpoint Protection Manager from one machine to another

http://www.symantec.com/docs/TECH104389

How to point clients to a new SEPM after decommissioning or replacing the primary SEPM.

http://www.symantec.com/docs/TECH92556

Migrating from Symantec Endpoint Protection v.11.x clients to Install Symantec Endpoint Protection v.12.1. could migrate flawlessly without any issues.

It is always recommended to perform a Disaster Recovery for SEPM 11.x before Migrating to SEP 12.1 as a Backup step.

Here are the Best Practices for Upgrading to SEP 12.1 RU2 - 

Best practices for upgrading to Symantec Endpoint Protection 12.1.2

http://www.symantec.com/docs/TECH163700

Also, check the Articles for the Migration on :

Quick Access to Symantec Knowledgebase Articles of Symantec Endpoint Protection 12.1

https://www-secure.symantec.com/connect/articles/quick-access-symantec-knowledgebase-articles-symantec-endpoint-protection-121

SEP 11.x to SEP 12.1 Upgrade process graphical overview

https://www-secure.symantec.com/connect/articles/sep-11x-sep-121-upgrade-process-graphical-overview

WhitePaper for Migration: https://www-secure.symantec.com/connect/downloads/migration-whitepaper-symantec-endpoint-protection-version-121

Hope that helps!!