Endpoint Protection

 View Only
Expand all | Collapse all

Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

Migration User

Migration UserJul 30, 2009 09:14 PM

  • 1.  Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

    Posted Jul 27, 2009 09:09 AM
    Hello SEP users

    I currently have a Endpoint environment that runs SEP 11.0.2010.25 MR2 MP1.

    I want to be running the latest version of SEP and to my understanding this would be: 11.0.4202 MR4 MP2 ?


    I have currently deployed SEP to my clients with a custom msi file created from the SEP Manager/server. This works very well and i have had no problems with it.

    I understand the supported upgrade path is like this:

    FROM - SEP 11.0.2010.25 MR2 MP1 - TO - 11.0.4000 MR4 - TO - 11.0.4202 MR4 MP2

    Is this correct?

    Upgrading the server is no problem for me.

    But what about the clients?

    I want to upgrade / install using GPO and MSI files.

    What is the best way to go, i see two ways to go from here:

    1. Upgrade clients FROM - SEP 11.0.2010.25 MR2 MP1 - TO - 11.0.4000 MR4 - TO - 11.0.4202 MR4 MP2 
    2. Uninstall clients and install a fresh client 11.0.4202 MR4 MP2 

    Lets talk about the options.

    Option 1:

    a. First I would create a new custom package with the same features as the old install and the new package would be MR4 plain.
    b. Then assign the new package to my GPO that I used to deploy the old version of SEP. MR2 MP1
    c. Then select the option to upgade package with this option: package can upgrade ove existing package.
    d. Once all clients are upgraded to MR 4 plain. i would repeat steps a - c for the newest release?


    Option 2:

    a. First i would create a new custom package with the same features and the new package would be MR4 MP2.
    b. Then assing a new package to my GPO that i used to deplay the old version. MR2 MP1
    c. Then select the option to upgade package with this option: Uninstall the existing package, then install the upgrade package


    So what would you SEP users out there recommend me to do?
    Is it even possible to deploy this way with GPO?

    Thanks in advance!




  • 2.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

    Posted Jul 27, 2009 09:17 AM
    Hi

    Very simple step to upgrade the client, you may follow the following documents to upgrade the Manager and the clients.



    Migrating to Symantec Endpoint Protection 11.0.4202 (MR4 MP2)

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009051906042048


    Migrating Symantec Endpoint Protection using Symantec Endpoint Protection Manager

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007122614371048




  • 3.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

    Posted Jul 27, 2009 09:31 AM
    Thanks for your reply.

    I have already read that Document but it does not answer my questions regarding GPO upgrade.

    I want to upgade using GPO's.

    Please look at my two options.


  • 4.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

    Posted Jul 27, 2009 09:41 AM
    I would suggest if you want to upgrade the clients through GPO,

    You may first upgrade the SEP Manager to MR4 and then again upgrade it to MR4 MP2.

    Then you can set the MR4 MP2 install package via GPO

    Coz the clients can directly be upgraded from MR2 MP1 to MR4 MP2

    (Hence only upgrade the manager to MR4 and then MR4 MP2.)


  • 5.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

    Posted Jul 27, 2009 09:51 AM
    Thanks Warrior6945

    I will test the upgrade from MR2 MP1 to MR4 MP2 on a handfull of my clients.

    But is this supported by Symantec? The documents you linked did not list anything about clients. But is it safe to asume that the Upgrade path is only for the Server/Manager?

    Thanks again.


  • 6.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

    Posted Jul 27, 2009 09:52 AM
    Also it would be fine if you do not uninstall the existing package from the clients and directly push the new package.


  • 7.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2



  • 8.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

    Posted Jul 27, 2009 10:28 AM
    The main reason that we upgrade the SEP Manager to MR4 first is that in some instances the database may get corrupt if we directly upgrade to MR4 MP2

    As for the clients I would recommend to upgrade one client first and then if it works fine you may go for the rest.

    And please let me know how many clients and servers do you have in the environment.


  • 9.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

    Posted Jul 27, 2009 10:28 AM
    The main reason that we upgrade the SEP Manager to MR4 fist is that in some instances the database may get corrupt if we directly upgrade to MR4 MP2

    As for the clients I would recommend to upgrade one client first and then if it works fine you may go for the rest.

    And please let me know how many clients and servers do you have in the environment.


  • 10.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

    Posted Jul 27, 2009 04:04 PM
    Instead of making it harder on yourself, simply just follow the steps of automatic upgrade thorugh "Install packages" subtab under "Clients" tab. just make sure that "Maintain existing client features when updating: is checked, and don't enable the upgrade schedule :)

    it worked very well in our environment (having 7,000+ clients)


  • 11.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

    Posted Jul 28, 2009 03:37 AM
    I am also using  my GPO to deploy SEP to new computers that are installed on our network.

    If i just use the automatic upgrade you describe. I will end up with a GPO that is still installing a old version of SEP.

    Then I would asume that i would have to upgrade my GPO with the new installation for new computers.

    But how would I tell the GPO only to install on computers without SEP? Because i dont want a computer to do this:

    1. Update automatic using the way you describe in your post.
    2. SEP on the client is updated.
    3. My GPO is detected on the client and a new installation is triggered again.
    4. SEP is installed again. (because software installation policys are always winning)


    How would you prevent automatic upgraded computers from not beening affected by the GPO? WMI filter?


  • 12.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

    Posted Jul 28, 2009 04:45 AM
    I'd remove SEP installation totally from the GPO, and depend on the automatic update for the machines having older SEP version. For new installed machines that are not having any SEP version installed, it depends on the size of your network actually, and the number of clients you have.

    There are several methods of detecting machines without SEP such as:
    - Find unmanaged computers (under clients Tab)
    - Enabling a machine in each sybnet as an unmanaged detector, where it automatically reports any machines with no SEP and you can push the client on them at once right from SEMP console

    I believe upgrading the clients used to be the most concerning issue, but new installed machines isn't that problem, as in our case (and I'm sure its the same as yours) we have an OS image having the latest SEP version to be installed on new machines, which will not leave much space for unmanaged machines with no SEP :)

    Cheers


  • 13.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

    Posted Jul 28, 2009 06:45 AM
    Thanks for your reply Rule Breaker.

    I will think it over and do some testing, but i think i am sticking with my GPO infastructure.

    Anyone else on the forum that uses WMI filters to apply SEP installations with GPO?

    Thanks!


  • 14.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2
    Best Answer

    Posted Jul 29, 2009 04:39 AM

    I found a solution.

    This Article pretty much answered my questions:
    https://www-secure.symantec.com/connect/articles/mp-upgrade-path-compliance-using-group-policy

    I will mark this as a Solution so others searching can find it and your posts. That way they can determin what way to go when upgrading clients.

    Thanks to everyone for helping.



  • 15.  RE: Need help upgrading from 11.0.2010.25 MR2 MP1 to 11.0.4202 MR4 MP2

    Posted Jul 30, 2009 09:14 PM
    Happy for you :)