Endpoint Protection

 View Only
  • 1.  Server Move to new hardware

    Posted Oct 16, 2012 07:15 AM

    HI,

    We are planning to move our sepm server another server.

    Kindly provide best practices.

     



  • 2.  RE: Server Move to new hardware
    Best Answer

    Posted Oct 16, 2012 07:19 AM

    HI,

    Check this artical.

    How to move Symantec Endpoint Protection Manager from one machine to another

    http://www.symantec.com/business/support/index?page=content&id=TECH104389

    Symantec Endpoint Protection 11.x: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

    http://www.symantec.com/business/support/index?page=content&id=TECH102333

     

    Check this thread also

    http://www.symantec.com/connect/forums/sepm-moving-one-server-another

    http://www.symantec.com/connect/forums/move-symantec-endpoint-protection-manager-console-new-server



  • 3.  RE: Server Move to new hardware

    Trusted Advisor
    Posted Oct 16, 2012 02:36 PM

    Hello,

    Since you are running SEP 11.x, I would suggest you to check these Articles:

    How to move Symantec Endpoint Protection Manager from one machine to another

    http://www.symantec.com/docs/TECH104389

    Symantec Endpoint Protection 11.x: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

    http://www.symantec.com/docs/TECH102333

    Also keep the SylinkReplacer Tool Handy for SEP 11.x - 

    https://www-secure.symantec.com/connect/downloads/sylinkreplacer-tool-connecting-sep-clients-sepm

    Hope that helps!!



  • 4.  RE: Server Move to new hardware

    Broadcom Employee
    Posted Oct 17, 2012 05:20 AM

    Hi Amit,

    If possible provide more info, are you moving from server 2003 to 2008? changing only IP address or hostname as well? Which version are you planning to install?

    With this info we can give you one of the best possible solution.

    There are two methods to move Symantec Endpoint Protection Manager (SEPM) from one machine to another:

    Method 1: if the SEPM server keeps the same IP and host name, you can refer to "Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager"

    SEP 11.x: http://www.symantec.com/business/support/index?pag....

    SEP 12.1: http://www.symantec.com/docs/TECH160736

    Method 2: if the new SEPM server has a different IP and host name, there are two alternatives:

    1. Use replication to install a new SEPM and keep the policy the same with old SEPM. See "How to move Symantec Endpoint Protection Manager from one machine to another" 

    http://www.symantec.com/business/support/index?page=content&id=TECH104389

    Note: Replication is an option, but its better not to go for that. Because if you do replication and remove the old server that is the Primary SEPM , in future if you want to do replication you will not be able to do so.

    2. Install a new SEPM, then use the Sylink file to establish communication between the new SEPM and the existing SEP client through sylink replacer tool.

    Note : Sylink replacer tool is most commonly used option because it's easy to use.

    Please go through following thread for more details:

    https://www-secure.symantec.com/connect/forums/migration-clients-other-server-sepm#comment-5229601

    Link for more information :

    http://www.symantec.com/business/support/index?pag...



  • 5.  RE: Server Move to new hardware

    Posted Oct 17, 2012 08:13 AM

    If possible provide more info, are you moving from server 2003 to 2008? changing only IP address or hostname as well? Which version are you planning to install?

    We don't be change anything in sepm server.Same configuration configure antoher server.



  • 6.  RE: Server Move to new hardware

    Posted Oct 17, 2012 08:14 AM

    Hi

    There could be 2 possible steps to perform the migration.

    1. Recommended or the best way:

    Configure the second new server as a replication partner of the existing one. Then configure the “management server list to point the clients to the new server. Keep the setup for some time so that all the clients receives the policy and then delete the replication and de-commission the old server. Following this method will have no downtime and orphan clients.

    Note: Following this method needs the server name to be different as well.
    · Reference Documents:

    URL: http://www.symantec.com/docs/TECH105928

    URL: http://www.symantec.com/docs/TECH104582

    Note: Please follow the “Defining Management Server Lists” section. Remember you need to set up the new server as Priority 1.
    2. Disaster recovery Method:

    Follow the normal Disaster Recovery Method to install the Symantec Endpoint Protection Manager on the new server. This method may lead into downtimes and orphan clients.
    · Reference documents:

    URL: http://www.symantec.com/docs/TECH104389

    URL: http://www.symantec.com/docs/HOWTO26644

    Regards


     



  • 7.  RE: Server Move to new hardware

    Posted Oct 17, 2012 07:49 PM

    OK, one slightly out of the topic.

    what about if the SEPM server is new build as VM and then the IP address is transferred to the new server from the old server ?

    does backup and restore method works for the new server as VM ?



  • 8.  RE: Server Move to new hardware

    Trusted Advisor
    Posted Oct 18, 2012 09:27 AM

    Hello,

    Yes, Backup and Restore would work on the new SEPM on a new VM with same IP address and Host name. Just make sure you have the same version of SEPM installed as installed on the older VM.

    Secondly, incase of different IP, check this Article:

    How to move the Symantec Endpoint Protection Manager server to a new VM or server machine with a different IP.

    http://www.symantec.com/docs/TECH95311

    Hope that helps!!



  • 9.  RE: Server Move to new hardware

    Posted Oct 18, 2012 09:55 AM

    cool, many thanks Mithun !



  • 10.  RE: Server Move to new hardware

    Posted Oct 18, 2012 10:02 PM

    Hi,

    Thanks all of you i have send migration plan my boss.

    In future any problem are occured i will create new thread.

    Thanks a ton....