Endpoint Protection

 View Only
Expand all | Collapse all

SEP/SEPM Upgrades 11.x to 12.x

  • 1.  SEP/SEPM Upgrades 11.x to 12.x

    Posted Apr 25, 2012 01:54 PM

    So, after the brain drain of another layoff, we now have no one who knows anything about SEPM/SEP beyond basic installation. I have drawn the short straw. Since our previous "brain" had exactly zero documentation, I figured I may as well do that too. I have already found numerous internal KB articles that I still need to read, so I am not looking for a walkthrough at this time. Just some basic questions, if you please:

     

    1) If this dropped in your lap, how would YOU start (or suggest I start)?

    I have made sure to get access to the server, or course, and have taken the time to get my accounts registered here, and have read some knowledge base articles already. Training is off the table at this time.

     

    2) How do you reconcile the numerical version numbers to their equivalnet RU/MP designations? Is there a table somewhere that can be linked to for future reference?

     

    3) Best Practices suggest I upgrade to latest 11.x release before upgrading, but I think the supported upgrade paths require 2 updates anyway. So, should I update 11.6->11.7->12.1 RU1,  or 11.6->12.1->12.1 RU1 (I think those paths are correct)?

     

    4) Our SEPM server is virtualized in VMware, so I can snapshot before the upgrade and revert if something goes awry. Are there any gotchas here that you know of? DO I still need to backup the local DB?

     

    Thanks ahead of time for any info you can provide.



  • 2.  RE: SEP/SEPM Upgrades 11.x to 12.x

    Posted Apr 25, 2012 02:30 PM

    Hi,

    1) I would start by reading the manuals in the installation media

    2) simple rule: 11.0.<RU><MP>xx, for example
    11.0.7200 = 11.0 RU7 MP2
    11.0.5002 = 11.0 RU5 (no MP)
    12.1.1000 = 12.1 RU1

    3) No, you don't need 2 updates, but see supported migration paths in the migration procedure:
    http://www.symantec.com/business/support/index?page=content&id=TECH174545

    4) VMware snapshots are OK, this how I restore my test machines after experiments.

     



  • 3.  RE: SEP/SEPM Upgrades 11.x to 12.x

    Posted Apr 25, 2012 02:39 PM

    Well, you are in a pickel.

    But, rest assured it's not as bad as you might think.  First off, get confortable with the interface.  Just know, where what is.

    There is a section for receiving notifications, has that been setup?  If so, I suggest you get your e.mail in there and start receiving anything that the previous person might have been receiving.

    * * * * * * *

    1 - Mostly get comfortable with the interface.  Ensure you have your e.mail address or a generic one for the department setup for https://fileconnect.symantec.com That's where you will be getting your updates.  Also, make sure you register in the licensing portal of Symantec.  https://licensing.symantec.com/

    Get your paperwork and licensing information up to date.

    2 - 11.0 is the original release.  RU (Release Updates) are semi major upgrades in version.  So RU1 = 11.1 RU2 11.2 and so on.  There are also minor releases MP (Maintenance packages) release to semi major upgrades.  RU1 / MP1 would be some fixes in the Release Update, but not major enough to merit a version change.  It's simple when you understand the logic.  11.1.yyyyy  the "yyyyy" would be changed by an MP.

    3 - Chetan has a pretty good picture of the upgrade path here:

    https://www-secure.symantec.com/connect/articles/upgrade-paths-sep-121amber

    4 - Capture the VM is a good idea.  Of course, a proper backup is also a good idea.  I would say do both (when you have time)  Why?  You never know when a good backup will come in handy. 

    SEP 11:

    http://www.symantec.com/business/support/index?page=content&id=TECH102333

    SEP 12.1:

    http://www.symantec.com/business/support/index?page=content&id=TECH160736

     

    Besides with a database full backup, you open up other options, like adding a second non-replicated server and so forth... 

     

     



  • 4.  RE: SEP/SEPM Upgrades 11.x to 12.x
    Best Answer

    Trusted Advisor
    Posted Apr 25, 2012 02:48 PM

    Hello,

    I would try my level best to assist you.

    1) To start, you wouuld have to understand the SEPM and SEP architecture and it's connection.

    In SEPM, it is important for you to understand the Different TAB's and Policies within the same.

    In SEPM, you would have to understand the features, and level of Protection it provides and how it as a Client connects to the SEPM.

    2) Yes, in SEP Environment, it is important to Maintaining Consistency of Software Versions throughout a SEP 11 Organization, check this Article:

    http://www.symantec.com/business/support/index?page=content&id=TECH131660

    Check this Article to find how Old version are you carrying:

    What are the Symantec Endpoint Protection (SEP) versions released officially?

    https://www-secure.symantec.com/connect/articles/what-are-symantec-endpoint-protection-sep-versions-released-officialy

    3) For Migration Paths - 

    Supported Upgrade paths to Symantec Endpoint Protection 12.1

    https://www-secure.symantec.com/connect/articles/upgrade-paths-sep-121amber

    Upgrading or migrating to Symantec Endpoint Protection 12.1.1000 (RU1)

    http://www.symantec.com/business/support/index?page=content&id=TECH174545

    and

    SEP 11.x to SEP 12.1 Upgrade process graphical overview

    https://www-secure.symantec.com/connect/articles/sep-11x-sep-121-upgrade-process-graphical-overview

    Before migration, please check this Article - 

    https://www-secure.symantec.com/connect/articles/quick-access-symantec-endpoint-protection-121

    4) Perform a Disaster Recovery steps before you migrate -

    Symantec Endpoint Protection 11.x: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

    http://www.symantec.com/docs/TECH102333

    Hope that helps!!


  • 5.  RE: SEP/SEPM Upgrades 11.x to 12.x

    Posted Apr 25, 2012 03:07 PM

    Beppe, Jason, and Mithun,

     

    Thanks for the quick turn around. I think I was heading in the right direction, but thanks for the info on major/minor releases and licensing direction, too. Lookslike you have everything I need between the both of you. 



  • 6.  RE: SEP/SEPM Upgrades 11.x to 12.x

    Trusted Advisor
    Posted Apr 25, 2012 03:11 PM

    Hello,

    In reference to Licensing, check these VIDEO's:

    Licensing Guide for SEP 12.1- Part 1

    Licensing Guide for SEP 12.1- Part 2

    Hope that helps!!



  • 7.  RE: SEP/SEPM Upgrades 11.x to 12.x

    Posted Apr 25, 2012 07:55 PM

    The links provided above state that 11.0 RU6 MP2 should be able to upgrade directly to 12.1. The upgrading/migrating to 12.1 RU1 link mentions that you can migrate from 11.0 RU6 to 12.1 RU. So is there a difference between migrating and upgrading, or is the implication that I can upgrade directly to 12.1 RU1?



  • 8.  RE: SEP/SEPM Upgrades 11.x to 12.x

    Broadcom Employee
    Posted Apr 26, 2012 12:59 AM

    no implications you can upgrade the servers and clients to SEP 12.1 RU1 from SEP 11 RU 6 MP3.



  • 9.  RE: SEP/SEPM Upgrades 11.x to 12.x

    Broadcom Employee
    Posted Apr 26, 2012 02:23 AM

    Hi Sysadmin_D,

    1) If this dropped in your lap, how would YOU start (or suggest I start)?

    --> Install SEPM on test machine with the help of following article

    https://www-secure.symantec.com/connect/articles/sep-121-fresh-installation-graphical-overview

    Navigate through SEPM main tabs i.e. Home, Monitor, Reports,Policies, Clients & Admin tabs.

    For queries you can place search here http://www.symantec.com/business/support/index?page=landing&key=54619 & SEP forum is always there to help you.

    At SEP forum we have many article's & video's are available 

    https://www-secure.symantec.com/connect/security/articles

    https://www-secure.symantec.com/connect/security/videos

     2) How do you reconcile the numerical version numbers to their equivalent RU/MP designations? Is there a table somewhere that can be linked to for future reference?

    --> Check till date releases at http://bit.ly/m0vOJp

    3) Best Practices suggest I upgrade to latest 11.x release before upgrading, but I think the supported upgrade paths require 2 updates anyway. So, should I update 11.6->11.7->12.1 RU1,  or 11.6->12.1->12.1 RU1 (I think those paths are correct)?

    --> No, you would required one upgrade only

    If you are using RU6 then upgrade path is RU6 --> SEP 12.1 RU1

    4) Our SEPM server is virtualized in VMware, so I can snapshot before the upgrade and revert if something goes awry. Are there any gotchas here that you know of? DO I still need to backup the local DB?

    --> Yes, you can revert back with Snapshot, but it's always recommended to keep DB backup at safe place for disaster recovery. I used to follow onsite backup and offsite backup concept.

    Now, to learn upgrade process please check this article 

    SEP 11.x to SEP 12.1 Upgrade process graphical overview

    https://www-secure.symantec.com/connect/articles/sep-11x-sep-121-upgrade-process-graphical-overview

    I hope it will help you.

     



  • 10.  RE: SEP/SEPM Upgrades 11.x to 12.x

    Posted Apr 27, 2012 11:31 AM

    Appreciate the timely info all. Now to get some work done.



  • 11.  RE: SEP/SEPM Upgrades 11.x to 12.x

    Posted Apr 28, 2012 04:42 AM

    and please remember to mark the solution