Endpoint Protection

Hello and Happy New Year to all.

I want to move to new server running Win2008R2 and upgrade my SEPM to the latest version.

According to the following article, the version installed to the new server must be the same version as on the old server.

http://www.symantec.com/business/support/index?page=content&id=TECH104389

 

The running SEPM is the version 11.0.5002.333 and when i go to Symmantec connect and add the serial, it gives me the option to download version 11.0.7300. There will be a problem if the new server has version 11.0.7300 and the old one version 11.0.5002.333 or i must update the old server to 11.0.7300 first and then follow steps of the article?

 

Thank you

Hello,

In your case, you would require a Serial number for Symantec Endpoint Protection 12.1 to download the same from Symantec Fileconnect website.

So, you would have to upgrade your SEP 11 License to SEP 12.1 License, which is free. Check this Article below on how to...

How to upgrade your SEP11 license to SEP12 online

https://www-secure.symantec.com/connect/articles/how-upgrade-your-sep11-license-sep12-online

Once Downloaded, you may follow the Best Practices Article provided below to Migrate / Upgrade to SEP 12.1

Check this Article:

Best practices for upgrading to Symantec Endpoint Protection 12.1.2

http://www.symantec.com/business/support/index?page=content&id=TECH163700

Hope that helps!!

dont you have the old setup (11 ru5)? if not open a support ticket to get the version. or upgrade the existing one to SEP 12.1 RU 2 then move to different server. How to move SEPM machine from one system to another http://www.symantec.com/business/support/index?page=content&id=TECH104389 for SEPM 12 http://www.symantec.com/business/support/index?page=content&id=TECH171767

Hi,

Happy New Year !!!

Check this article :

https://www-secure.symantec.com/connect/articles/hot-move-sepm-one-server-another-server

I would recommend you to upgrade to the latest SEP version. Latest SEP version is SEP 12.1 RU2.

I believe to all the existing SEP 11 customers upgrade to SEP 12.1 will be a free upgrade.

In your case you can directly upgrade from SEP RU5 (11.0.5002.333) to SEP 12.1 RU2.

Check till date SEP release here: http://bit.ly/m0vOJp

There are many advantage if you are upgrading to 12.1, few of them are listed here

Few differences between SEP 11.x and SEP 12.1 EE :  http://bit.ly/JpDR3U

If you still looking for an upgrade on existingn platform then you will have to go through multiple upgrade as per below:

SEP RU5 (11.0.5002.333)--> SEP 11.0.7000 (RU7) > SEP RU7 MP3  

 

Migrating to Symantec Endpoint Protection 11.0.7300 (RU7 MP3)

http://www.symantec.com/docs/TECH199189

 

Now question remains what's the best option to move.

If you have limited number of clients &  if possible then can go with fresh install.

install latest SEP version on winodws 2008 server and restore client communication relacing sylink.xml

 

If possible provide more information

1) Total number of SEPM's in the network?

2) Total number of Clients in the network?

3) If any GUP is configured?

4) Are there any custom policies are configured?

 

Thanks for your replies. I want to move SEPM first because the old server have only 411mb of free disk space. @Chetan: 1) Total number of SEPM's in the network: 1 2) Total number of Clients in the network: ~50 3) If any GUP is configured: No but i want to apply in the future 4) Are there any custom policies are configured: Yes

Hi,

You have around 50 clients only then I would suggest to go with fresh install at new server.

With fresh install following steps you will have to do manually

1) Install Fresh SEPM

2) Replace Sylink.xml on all the clients after that Clients will report into the default group

3) Create the group structure as it was previously

4) Move the clients to the specific group as it was previously

5) Import the exported policies and assign it to the groups.

You can export the polices manually from the old SEPM and can import into the the new SEPM.

About client communication, you can reset the client communication by sending new Sylink.xml.

Meanwhile keep the running old SEPM so that all the clients in the network will remain protected.

Once all the clients started communication with the new SEPM then go ahead and decommission old SEPM.

OR

Choose any other available method like replication, disaster recovery etc

Let us know which version you have decided to upgrade & through which way you would like to move to the new server.

 

 

move it to different server with te existing version and then upgrade.

Hello Chetan, There is more easy to do the replication than to build from 0? I have found the disk with version 11.0.5007.333 so i can install the same version to the new version. For the update now, when i add serial to fileconnect site, it gives me the following version: 12.1.2 Thank you

Hi,

Only one concern is with the replication.

If you do replication and remove the old server that is the Primary SEPM, in future if you want to do replication you will not be able to do so. It's like Primary & Secondary server.

By default Old SEPM will be the Primary and new SEPM will become a secondary server.

In near future if you don't see any requirement of any further replication then can go ahead with this option.

You can upgrade from RU5 to SEP 12.1 RU2 & can initiate replication from the new SEPM.

I imagine by doing the step 12.Add MACHINE_1 under Priority 2 and add MACHINE_2 under Priority 1, and assign this New Management Server List to all the groups, i assign the new server as a primary. Is it wrong? I can't upgrade because the old server have only 411 mb of free disk space :) Your opinion is to make a fresh install to new server directly to version 12.1.2? Thank you

Hi,

I imagine by doing the step 12.Add MACHINE_1 under Priority 2 and add MACHINE_2 under Priority 1, and assign this New Management Server List to all the groups, i assign the new server as a primary.
Is it wrong?

--> That's correct. It means clients should communicate to the new server as a primary server & if it fails then switch to secondary.

Your opinion is to make a fresh install to new server directly to version 12.1.2?

--> Yes, with available disk space you won't be able to perform upgrade or replication either.

 

"Thumbs Up" to Chetan's advice above.

For an installation of only 50 clients, it would be far easier to setup a brand-spanking new SEPM on the latest version of the software, and use it's inbuilt "Comms Update" utility (accessed via the "Common Tasks" -> "Install Protection Client..." on the HOME section of the console) to redirect your clients to the new server, or follow the steps described in the below article:

http://www.symantec.com/docs/TECH92678

It would be recommended obviously, to make sure you get the policies and group structure configured as per your requirements on the new SEPM before you start the client redirection.

Chetan, i will follow your advice and i install the latest version to the new server. One thing, can i export policies from the old server (version 11) and import to new server(v12.1)?

yes, you can import SEP11 policies into a SEP12.1 SEPM

it will work, also note the new features settings will be set to default (like download insight, SONAR).

Hi,

One thing, can i export policies from the old server (version 11) and import to new server(v12.1)?

--> Yes it's supported.

Also if possible take a snapshot of group structure so you can create the same way on new SEPM.

 

 

 

Hi,

If you are looking for a fresh install of SEPM 12.1 RU2 then go through this article.

It will give you heads up about an install process.

SEPM 12.1 fresh install with Embedded database - graphical overview

https://www-secure.symantec.com/connect/articles/sep-121-fresh-installation-graphical-overview

To restore clients communication you can refer this article as well.

https://www-secure.symantec.com/connect/articles/sep-12-ru2-and

 

Thanks for your help Chetan, I will download the files and i let you know when i'm finished. Have a nice day.

Hi,

Symantec Endpoint Protection 12.1 File needs to be Downloaded from Symantec FileConnect website

You would require serial number & generally starts with 'M'. e.g. M1122334455

Please Download the below Installation files in-case a Full DVD version is needed, It's recommended as well to have always full setup because in future you may required it.

1) Symantec_Endpoint_Protection_12.1_RU2_Part1_Installation_EN.exe

2) Symantec_Endpoint_Protection_12.1_RU2_Part2_Tools_and_Documents_EN.exe

Symantec_Endpoint_Protection_12.1_RU2_Part1_Installation_EN.exe includes all the Installation of

SEPM 12.1 RU2 , SEP 12.1 RU2 (32 bit) , SEP 12.1 RU2 (64 bit), SEP MAC 12.1 RU2 , SEP Linux 12.1 RU2

Symantec_Endpoint_Protection_12.1_RU2_Part2_Tools_and_Documents_EN.exe includes Tools and Documents for SEP 12.1 RU2

Hi,

Is there any update on this?

Hello Chetan and sorry for my delayed reply.

 

I have install from scratch SEPM 12.1 to a new server and i plan to test it this week and 2-3 days on next week.

I add 1 workstation and 2 servers for this test period.

Regarding your experience, our offices are protected by a firewall etc...It is better to enable SONAR and Download Insight or is better to disable these features in the case of conflicts?

 

Thank you

Hi,

SONAR and Download Insight features will not conflict with your own firewall.

It's strongly recommended to enable all these featues to enahnce antivirus protection level.

Hi

There could be 2 possible steps to perform the migration.
 
1.       Recommended or the best way:
 
Configure the second new server as a replication partner of the existing one. Then configure the “management server list to point the clients to the new server. Keep the setup for some time so that all the clients receives the policy and then delete the replication and de-commission the old server. Following this method will have no downtime and orphan clients.
 
Note: Following this method needs the server name to be different as well.
 
·         Reference Documents:
 
URL: http://www.symantec.com/docs/TECH105928
 
URL: http://www.symantec.com/docs/TECH104582
 
Note: Please follow the “Defining Management Server Lists” section. Remember you need to set up the new server as Priority 1.
 
2.        Disaster recovery Method:
 
Follow the normal Disaster Recovery Method to install the Symantec Endpoint Protection Manager on the new server. This method may lead into downtimes and orphan clients.
 
·         Reference documents:
 
URL: http://www.symantec.com/docs/TECH104389
 
URL: http://www.symantec.com/docs/HOWTO26644

 

Regards

 

As always, great information Chetan.

I have a little different scenario and would like your input.

Have two sites (Site A and Site B). Replication is set-up between the two sites. Both use external SQL databases and are running SEP version 12.1. Each site has four SEPMs and around 5000 clients for each site. Hardware on site A is is current (Win2008 on new VM machines).

Question: Need to upgrade hardware on all four SEPMs on site B with new VM machines and and Win 2008 OS. What specific approach would be recommended.

Thanks in advance for your input

Hi

Any update on the provided solution

Regards