Endpoint Protection

I'm upgrading machines from 12.1.14 to 12.1.2.

I'm using auto upgrade where I can.  It's easier.  And then the standalone exe when auto upgrade won't work for some reason.  That's rare... but it does happen.

And we're down to machine that had different feature sets.  If auto upgrade doesn't work, it's a pain.

How can I tell what feature set is applied to a machine?  In the client view, I can right click/edit and see the software version.  I can see the policies under the policy tab.  But how can I tell which feature set is installed?

Switch to the "Protection technology" view. If nothing is installed for that component, it will say "not installed"

otherwise it will show "enabled" or "disabled" if installed

are you talking about SEP?

generate computer status report.it will show whats been installed.

however export the package with the modules you want to install on client and use autoupgrade feature , note that select remove exitsing feature and logs.

Wow.  Thanks. 

I thought the default view was showing everything and the other views would only narrow that down. 

SEMP really seems cluttered sometimes like this, having to flip through several menus and find one little box.  Notifications are similar.  There's got to be an easy way to view this stuff quickly.

You can also run the Computer Status report from the Monitors page. That will give you a full listing as well.

I'm talking about the SEPM. 

We didn't have too many different feature sets, so once we identified a few parts on certain machines we figure out which feature set goes with which machine.

Now we can use the standalone exe to update the ones that wouldn't respond to the auto upgrade command.

Either the different view or computer status report should get you what you need than.

Hello,

In the Enterprise version, you can use Upgrade Clients with Package to upgrade existing clients: 

• How to upgrade Symantec Endpoint Protection clients by using Auto-Upgrade

However, the following cautions apply:

• If you upgrade from 11.x and use Application and Device Control, you must disable the Application Control rule "Protect client files and registry keys." After the clients receive the new policy, you may upgrade using AutoUpgrade.

• Due to possible bandwidth concerns, it is best to schedule AutoUpgrade for after hours. You can also stage and select a package on a web server when you run Upgrade Clients with Package, or you can use an alternate method to deploy the upgrade package.

AutoUpgrade is enabled by default for SEP SBE, but you can disable it. Go to the Computers page in the management console, right-click your Group, select Properties, and then click Disable Automatic Client Package Updates.

Reference: 

Best practices for upgrading to Symantec Endpoint Protection 12.1.2

http://www.symantec.com/docs/TECH163700

Steps to prepare computers to install Symantec Endpoint Protection 12.1 client

http://www.symantec.com/docs/TECH163112

Hope that helps!!