Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SEPM 11.x to SEPM 12.1 Upgrade process graphical overview with Embedded database

Created: 27 Jul 2011 • Updated: 28 May 2014 | 108 comments
Language Translations
Chetan Savade's picture
+33 33 Votes
Login to vote

Updated on 11th Dec'13

 

Hi,

This is SEPM 11.x login screen

Stop the 11.x Symantec Endpoint Protection Manager Service before starting upgrade process.

Note: The SEP 12.1 SEPM upgrade installer requires three times the current database size (sem5.db) if upgrading from pre-12.1 SEPM with the embedded database only.

The download is a zip file and the file size is approximately 1.5 GB in size

From SEP 12.1 RU1 onwards Symantec is giving an options to download full product in two parts i.e par1 & part 2 or download individual files like SEPM setup, SEP 32 bit setup, SEP 64 bit setup, Tools as per requirement.

It gives more levarage to the Symantec customer to choose what he wants. In many cases it's seen that customer used to required only SEP setup and unnecssarily he had to download entire zip file which is around 1.5 GB in size.

Once the download finishes successfully, extract the contents of the compressed file to a location of your choice

Navigate to the extracted files, then enter the SEPM folder and double-click on setup.exe:

After Setup.exe is ran, the setup initialization process will start

Ready to Install

Click on Next,

License Agreement Page

The install procedure will prompt for a backup of the existing database so it will be available if required in the future

Click on Install to start Installation

Management Server & Console Installation Summary Page

If the following ports are already in use then other available ports will have to be selected.

Which communications ports does Symantec Endpoint Protection use?

http://www.symantec.com/docs/TECH163787  
 

These options are for database maintenance, new in SEP 12.1

Data Collection Page, Check mark is optional

Server Upgrade Status, Note that the database schema has changed with this version of SEPM.

Upgrade Succeeded message will come up

SEP 12.1 Login Screen - Good to go 

After successful upgrade you must activate the license.

Activating your new or renewed Symantec Endpoint Protection 12.1 product license

http://www.symantec.com/docs/HOWTO55294

Refer this article: https://www-secure.symantec.com/connect/articles/s...

 

SEP Upgrade overview :

SEPM upgrade is a two way process, performed by

  1. SEP 12.1 installation wizard
  2. Management server upgrade wizard

Each SEPM in a site must be independently upgraded

First server upgrades the database

Other server update server settings only

Replication can be restored after the upgaade

   - Starting in SEP 12.1, replication performs version checking

   - Eliminates cross version replication corruption

   - Prevents the need to disable replication prior to upgrade

1) Upgrading and migrating to Symantec Endpoint Protection 12.1

http://www.symantec.com/docs/TECH163602

2) Which communications ports does Symantec Endpoint Protection use?
 
http://www.symantec.com/docs/TECH163787
 
If you wish to download this as a PPSX , please check this 
 
 
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Exceptions for an upgrade:

Migrations from SEPM RU7 MP1& MP2 to all current versions of SEPM 12.1 are not supported. Future releases of SEPM 12.1 will contain the migration code necessary to update the newer database schema used by RU7 MP2.

Symantec Endpoint Protection (SEP) clients can be migrated from RU7 MP2 to SEP 12.1, however, SEP 11 RU7 MP2 managers cannot manage SEP 12.1 clients.

http://www.symantec.com/docs/TECH189972

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Migration support for 11.0.7101.1056 (RU7 MP1), 11.0.7200.1147 (RU7 MP2), and 11.0.7300.1294 (RU7 MP3) to 12.1 is supported for 12.1.2015.2015 (RU2) or higher.

 -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Tip: After successful upgrade if you faced issue especially while exporting new packages or suppose package export process is getting hung in that case you can run upgrade.bat file manually. Upgrade.bat file is present under C:\Program Files (x86) or (Custom installed drive)\Symantec\Symantec Endpoint Protection Manager\bin\upgrade.bat. It's a batch file.

 --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

 

Comments 108 CommentsJump to latest comment

Ajit Jha's picture

Really a Good one for the Fressher to gather Upgradatioon Knowledge. Keep posting.....

Regard's

Ajit Jha

Technical Consultant

ASC & STS

0
Login to vote
mssym's picture

Do not forget you will need to stop SEPM service before running upgrade.

0
Login to vote
EyeofHorus's picture

Mssym- "Stop Symantec Endpoint Protection Manager Service before starting upgrade process "  He had that on the above article.

 

What do you do if fileconnect is not showing the download available to you?

0
Login to vote
Chetan Savade's picture

Hi,

Have you received any email notification from Symantec about SEP 12.1? If yes please go through an email, it will guide you to download SEP 12.1

If you have not received any email notification, please contact license department (18003420652) they will provide you new serial number to download SEP 12.1

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

+1
Login to vote
Ajit Jha's picture

Yes i use to get the Email notification. Even in Trial Version

Regard's

Ajit Jha

Technical Consultant

ASC & STS

0
Login to vote
RSASKA's picture

I really like that SEP 12 has database maintenance options. Several problems with SEP 11 in our environment were traced back to database maintenance. If database is being maintained, then several problems can be prevented

The Enemy's greatest fear is that you'll discover who you really are, what you're really worth, and where you're headed.

 

0
Login to vote
EyeofHorus's picture

Thanks! I phoned and was given a serial to be able to see 12 on fileconnect. Appreciate the tip. Didnt realize that I would need to do that.

0
Login to vote
SAM_SHAIKH's picture

Hi,

 

I am bit confused on snapshot showing "Reporting port and Web service port"

Can anyone elaborate on this.

Regards,

SAM

0
Login to vote
Chetan Savade's picture

Hi,

Check this article.

Which communications ports does Symantec Endpoint Protection use?
 
http://www.symantec.com/docs/TECH163787

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

+1
Login to vote
Chetan Savade's picture

Hi,

Check following articles also

https://www-secure.symantec.com/connect/articles/few-feature-differences-between-sep-11x-and-sep-121

https://www-secure.symantec.com/connect/articles/feature-comparison-between-sep-121-sbe-and-ee

https://www-secure.symantec.com/connect/articles/enable-save-username-password-option-symantec-endpoint-protection-121

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
pbattke's picture

Hi,

I'm trying to upgrade my system from 11.0 v. to 12.1. Your instruction to get the new version was very helpful for me Chetan, thank You. My server and almost 100 clients computers aren't connect to the internet. Is it important for me to change TCP ports, and how to upgrade rest of clients to the new version?

Regards - Peter.

0
Login to vote
Chetan Savade's picture

Hi,

You can upgrade clients through multiple ways.

But most easiest option would be an auto upgrade smiley

Upgrading clients by using AutoUpgrade

http://www.symantec.com/docs/TECH96789

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
Sumit G's picture

Gr8 knowledge Base Article

Regards

Sumit G.

0
Login to vote
sandgang's picture

The last time i contacted Symantec, they had told that i cannot upgrade from SEP 11.0.7. Is it true ?

0
Login to vote
mon_raralio's picture

Quoting from http://www.symantec.com/docs/TECH162327 : All versions of Symantec Endpoint Protection Manager up to Release Update 6 Maintenance Patch 3 (RU6 MP3) can be migrated to version 12.1. Releases later than RU6 MP3 cannot be migrated to 12.1.

Although there might be a workaround for this. I held back the updates for my client until we get the latest working 12. We are stuck at RU6 MP1 on the clients and MP3 on the server.

“Your most unhappy customers are your greatest source of learning.”

0
Login to vote
Chetan Savade's picture

Hi,

I am agreed with Mon_roralio & it's applicable only from RU7 to 12.1 upgrade.

SEP 12.1 RU1 is released now.

Now you can upgrade from RU7 to SEP 12.1 RU1 directly.

I hope it will help you !!!

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
W007's picture

Gr8 knowledge Base Article

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

0
Login to vote
A.Bolko's picture

When i try to upgrade the Version to 12.1 i get an error when clicking "Install Symantec Endpoint Protection Manager"

Error Message: "Error opening installation log file. Verify that the specified log file exists and is writeable"

All Symantec Services are stopped. Where's this file located?

 

0
Login to vote
Chetan Savade's picture

Hi,

The SEP installer by default looks for the path “%USERPROFILE%\Local Settings\Temp” to store the installer logs.
 
Under USER Variable : Find the path  "%USERPROFILE%\Local Settings\Temp "
 
Are you able to access  %USERPROFILE% ( Start -Run-  %USERPROFILE%  ).
 
In some cases even %temp% folder has wrong permissions or is corrupt.
 
In that case you will have to modify setup.ini file
 
Open specific package folder and open setup.ini with notepad.
Find line CmdLine=/l*v "%TEMP%\SEP_INST.log"
Modify to CmdLine=/l*v "C:\SEP_INST.log"
Save file.
Run setup.exe 
 
Also Turn OFF Windows Firewall.
 
Turn Off User Access Control
 
I hope it will help you !!!

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

+1
Login to vote
Gurupreet's picture

Nice article for begineers !!

+1
Login to vote
kriser21's picture

Great article, thanks!

I need to upgrade from 11.0.7 to 12.1 RU1 and I don't see a full .exe file available through file connect.  Without the full file, I don't have a setup.exe file to do the install... Where can I find that?

0
Login to vote
Jon Bonning's picture

Should be a really helpful tool for those folks doing this for the first time (or those like me who haven't done it for a long time!)  The one suggestion I would venture to add is that you should really number the steps so it's easier to keep track of where you are in the process.

Jon Bonning - SEO quote

0
Login to vote
MaRRuT@CC's picture

always good to have some instuction guides for SEP

0
Login to vote
JAunmc's picture

I am preparing to upgrade from 11-12 and this document is great!  My question is this:  I have a sinle SEPM server using a database on an SQL server.  I take it that will not be an issue and I can just about follow this guide to do the upgrade?  Also will the database on the SQL server triple in size or is that just for embedded databases?

0
Login to vote
Chetan Savade's picture

Hi Jaunmc,

You can follow this guide to complete the upgrade.

 Also will the database on the SQL server triple in size or is that just for embedded databases?

--> The SEP 12.1 SEPM upgrade installer requires three times the current database size (sem5.db) if upgrading from pre-12.1 SEPM with the Embedded Database only.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
JAunmc's picture

This will leave the policies and setting intact correct?  Sorry for the noob questions.

0
Login to vote
pete_4u2002's picture

yes, everything will be intact. However as a best practice always follow DR steps .

0
Login to vote
Bhargav's picture

Thanks mate it is a great help

0
Login to vote
Dushan Gomez's picture

thanks for the guide mate !

Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP

 

-1
Login to vote
RegLeer's picture

This was amazingly helpful, thanks a lot

R. Leerdam - WLZine

0
Login to vote
rupesh.naik45@yahoo.in's picture

but can we directly upgrade 11.6 A to 12.1 ru 1 \ MP 1 please suggest.

 

0
Login to vote
Chetan Savade's picture

Hi Rupesh,

You can directly upgrade from 11.6 to SEP 12.1 RU1.

You can not directly upgrade from 11.6 to SEP 12.1 RU1 MP1

So Upgrade path would be  11.6 --> SEP 12.1 RU1 --> SEP 12.1 RU1 MP1

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
PBONEAL's picture

Can I just upgrade the server from 11.6 --> SEP 12.1 RU1 --> SEP 12.1 RU1 MP1, or must I upgrade the desktops to SEP 12.1 RU1 first as well?

0
Login to vote
Chetan Savade's picture

Hi,

Supported upgrade path is common for both i.e SEPM and SEP clients.

It would be great if you could upgrade clients to RU1 first & then to MP1.

However we have seen many customers follows the upgrade path only for SEPM not for clients.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
rupesh.naik45@yahoo.in's picture

can you explain me about how heuristic & Bloodhound  is working in sonar and insight ?

 

 

 

 

 

0
Login to vote
Chetan Savade's picture

Hi Rupesh,

SONAR uses heuristics to determine if an unknown file behaves suspiciously and might be a high risk or low risk. It also uses reputation data to determine whether the threat is a high risk or low risk.

About SONAR

http://www.symantec.com/business/support/index?page=content&id=HOWTO55254

Managing SONAR

http://www.symantec.com/business/support/index?page=content&id=HOWTO55215

Adjusting SONAR settings on your client computers

http://www.symantec.com/docs/HOWTO55258

Handling and preventing SONAR false positive detections

http://www.symantec.com/docs/HOWTO55273

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

+1
Login to vote
Chetan Savade's picture

Hi,

Also check this article

How the Insight Lookup process works

http://www.symantec.com/docs/TECH169282

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
Dushan Gomez's picture

Hi,

Can i upgrade my current SEPM from v 11.6005 into v 12.1 MP1 ? directly as inline upgrade ?

Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP

 

-1
Login to vote
PBONEAL's picture

I asked the same question just 5 posts back and it was suggested that you must upgrade the SEPM in steps but that many had skipped the RU1 middle step for the client side...

+1
Login to vote
Chetan Savade's picture

Hi,

Not supported from RU6 to 12.1 RU1 MP1 as a inline upgrade.

Supported upgrade path is as per below:

SEP 11.6005.x --> SEP 12.1 RU1 --> SEP 12.1 RU1 MP1

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

+1
Login to vote
rupesh.naik45@yahoo.in's picture

 It is true that 11.6 data base is successfully restored on 12.1 

 

0
Login to vote
rupesh.naik45@yahoo.in's picture

 It is true that 11.6 data base is successfully restored on 12.1 RU1 ?

 

0
Login to vote
Chetan Savade's picture

Hi Rupesh,

SEP 11.x version uses IIS with reporting component. From SEP 12.1 IIS is no more used with reporting.

During migration it would be taken care.If you tried to restore RU6 database it should failed.

 

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
PBONEAL's picture

If I have some unmanaged 12.1 clients can I push out the managed client on top of it or do I need to uninstall the unmanaged client first?

 

Thanks

Paul

0
Login to vote
Chetan Savade's picture

Hi,

No need to push entire package to convert unmanaged client to managed client. Uninstall also not required.

Check following article for more details

How to change a Symantec Endpoint Protection client from unmanaged to managed

http://www.symantec.com/business/support/index?page=content&id=TECH102322&locale=en_US

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

+1
Login to vote
Dushan Gomez's picture

so in this case just dragand drop the sylink.xml into the application directory is fine ?

Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP

 

0
Login to vote
Chetan Savade's picture

Hi Dushan,

You are right, just drag and drop the sylink.xml into the application directory.

You can use Sylink replacer tool also.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

+1
Login to vote
Dushan Gomez's picture

Yes that's what I'dve thought so Chethan.

Thanks for the clarification.

Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP

 

0
Login to vote
Slawek_Maj's picture

My software SEP 12.1 shows error of actualization (event 1013). What is there the problem ?  Maybe system Windows is  damaged? 

Slawek_Maj  panely ET

0
Login to vote
Chetan Savade's picture

Hi,

Could you please attach screenshot of an error ?

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
Savantis's picture

Hello Adam,

 

thank you for the response. I cloned my 11x environment and upgraded the cloon.

 

Regards,

Savantis

0
Login to vote
Slawek_Maj's picture

 

Hi,
I install from new the system windows, if the problem does not disappear I will send You  screenshot, only I do not have Your address e-mail. Please give your address of post office  e-mail. I will be very grateful to You.
 
 

Slawek_Maj  panely ET

0
Login to vote
Chetan Savade's picture

Hi,

To send an email reply to the poster click on the user name and choose “Send this user an email”

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
Crillus's picture

Hello,

 

This tutorial is very good but I've a question : I've an installation of SEP RU5 with the database on a separate server. Does this procedure will recognize and update the remote database or will it ask me to install a new SQL Server on the SEP machine ?

0
Login to vote
pete_4u2002's picture

it will detect the DB on the remote server and will upgrade the DB schema

0
Login to vote
Crillus's picture

Thank you, I had this problem with another piece of software (but not from Symantec) and since this time I've always a doubt when I upgrade.

Thank you again.

0
Login to vote
Chetan Savade's picture

Hi,

Just an info.

Upgrade path for you would be SEP RU5 (11.0.5002.333) --> SEP 12.1 RU1 (12.1.1000.157) --> SEP 12.1 RU1 MP1 (12.1.1101.401)

Upgrade path is applicable for both i.e SEPM & SEP clients.

Till date SEP releases: http://bit.ly/m0vOJp

 

 

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

+1
Login to vote
Crillus's picture

Hello,

 

I through that I answered but no.

 

It's perfect, thank you !

0
Login to vote
John Santana's picture

Hi,

I've got SEP client v11.0.4 can I just upgrade them into 12.1 RU2 directly ?

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

0
Login to vote
.Brian's picture

John,

Yes, you can. You can direct upgrade any 11.x version to 12.1.2.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

+1
Login to vote
John Santana's picture

Thanks Brian forthe quick clarification.

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

0
Login to vote
Savantis's picture

Hello,

 

I'm just a tiny bit confused because of the number of documents I have to go through to update our SEP environment.

Somewhere I read the comment that upgrading is just a few clicks, well I've lost my way smiley.

Please allow me to note our current installation:

- Symantec Endpoint Protection Enterprize Edition (version 11.0.7000.975) (which RU is this?)

- One Virtual SEP Management Server (Windows 2003 R2, SP2)

I've downloaded almost all of the files on fileconnect and wondering which setup to use:

- Symantec_Endpoint_Protection_12.1_RU1_Part1_Installation_EN or

- Symantec_Endpoint_Protection_12.1.1_MP1_Part1_Installation_EN

I've come across RU1, MP1 and RU1MP1 versions of SEP 12.1

Please your assistance.

 

Much abliged and Greetings,

Pim

System Administrator

 

+2
Login to vote
Chetan Savade's picture

Hi,

Check the following article.

What are the Symantec Endpoint Protection (SEP) versions released officially?

http://bit.ly/m0vOJp

Your current version is version SEP 11 RU7 (11.0.7000.975)

You can upgrade from SEP 11 RU7(11.0.7000.975) to SEP 12.1 RU1(12.1.1000.157)

Navigate to Symantec_Endpoint_Protection_12.1_RU1_Part1_Installation_EN. Extract it if it's a zip file.

Navigate to SEPM folder, click on setup.exe & it will start the upgrade process.

If you would have any queries please revert.

 

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
rupesh.naik45@yahoo.in's picture

hi chetan

(when i have upgrade)on my one server i got error that web sevices port is 8444 is using another application

can we use any othe port for web services?

and reporting port?

 

 

please help..!

 

0
Login to vote
Dushan Gomez's picture

Yes that is possible Rupesh,

In order to resolve this issue, once you have installed the SEPM, you must either change the port that the conflicting application runs on or alter the Tomcat port in the SEPM configuration file.

To alter the Tomcat port(s) in SEPM, following these steps:

1.     Ensure that the Symantec Endpoint Protection Manager service is stopped.
2.     Right-click the server.xml file and click Edit to modify the file:
C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\conf\server.xml

For conflicts with port 8005, change the port to another unused port:
port="8005"

For conflicts with port 9090, change the port to another unused port:
port="9090"
Note: It's NOT necessary to change both ports when only one of them is conflicting.

3.     Save the changes to the "server.xml" file.
4.     If port 9090 is changed at step 2, please modify conf.properties as below. Otherwise continue to step 5.
a)     Open conf.properties with notepad. conf.properties is located in <SEPM_Install_folder>\tomcat\etc folder (by default on a 32-bit Windows system, SEPM_Install_folder = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\).
b)     Locate the line that starts with "scm.http.port="
c)     Change the value from default 9090 to match the value specified at step 2 above.
d)     Save the change to conf.properties.
5.     Start the Symantec Endpoint Protection Manager service. If port 9090 is changed, World Wide Web Publishing Service needs to be restarted as well.

Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP

 

0
Login to vote
rupesh.naik45@yahoo.in's picture

2 )

after upgrading SEPM server and Client some clients have very slowness issue.

 

please suggest some steps.

 

 

 

0
Login to vote
Chetan Savade's picture

Hi Rupesh,

You should test the performance using latest SEP version because following fixes are listed with SPE 12.1 RU2

Reference: New fixes and enhancements in Symantec Endpoint Protection 12.1 Release Update 2

http://www.symantec.com/docs/TECH199676

Applications are slow to launch over the network
Fix ID: 2756476
Symptom: Applications are slow to launch over the network after Symantec Endpoint Protection client is installed. Disabling the SymTDI driver resolves the issue.
Solution: Updated the SymTDI driver to improve performance of large networked files.
 
ThinApp portable applications are slow to start from network share
Fix ID: 2645151
Symptom: Applications that are packaged as VMware ThinApp portable applications are slow to launch when the application is launched via a network share.
Solution: Modified the Auto-Protect driver to honor exonerated network files when the network scan on execute option is enabled.
 
Performance of App-V applications is slow
Fix ID: 2825796
Symptom: Applications using Microsoft Application Virtualization (App-V) are slower to launch and slower to execute.
Solution: Modified a driver to allow the scanner to store cached data in memory for App-V virtualized applications.
 
File operations too slow with Symantec Endpoint Protection client and SOXBOX agent
Fix ID: 2662063
Symptom: Symantec Endpoint Protection client and SOXBOX agent installed together cause file operations to run too slowly.
Solution: SymEFA no longer enables an NTFS change journal for the SOXBOX agent's hidden NTFS volume.
 
Excessive non-paged memory used by Symantec Endpoint Protection client
Fix ID: 2733231
Symptom: The Symnets.sys driver (pool tag SND1) slowly consumes a large amount of non-paged pool memory, eventually leading to a system crash.
Solution: Updated the SymTDI driver to resolve a non-paged pool memory leak.
 

 

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

+1
Login to vote
rupesh.naik45@yahoo.in's picture

Hi chetan,

currently we have upgraded our Symantec server from 11X to 12.1 RU1 MP1 and we have total 82 SEPM server, is there any setting for better performance, like in the application policy or Virus and spyware policy.

please suggest the same.because SEP 12.1 RU2 is not posible on all server because now we have total 62 server are upgraded on 12.MP1 RU 1 and some server and Client having problem means slowness issue.

 

please suggest any steps.

0
Login to vote
Chetan Savade's picture

Hi,

There are three default policies under Virus & Spyware, I hope you have assigned Virus & Spyware Protection Policy- Balanced

Also refer this thread & try to make those changes in policy

https://www-secure.symantec.com/connect/forums/off...

Also make sure you have selected best application performance under advance scanning option

Refer this article:

https://www-secure.symantec.com/connect/articles/s...

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
John Santana's picture

thank you for sharing!

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

0
Login to vote
Dushan Gomez's picture

finally RU2 has arrived :-)

Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP

 

+1
Login to vote
John Santana's picture

Yes I must admit that this is the best Symantec Endpoint protection manager that I have ever upgraded into, inline upgrade works great and no errors.

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

+1
Login to vote
Dushan Gomez's picture

of course it should John, this is the latest Symantec enterprise product

Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP

 

0
Login to vote
djasi's picture

how can i download SEP 12.1 to upgrate my SEP 11 from where i can download the SEP 12.1

0
Login to vote
Chetan Savade's picture

Hi,

You would required product serial number to download the latest software. Generally Product serial number starts with 'M' e.g. M123456789.

If you are not able to find product serial number then you can call Symantec license department & they can try to provide you the serial number.

Contact the Licensing Department via:

Website: http://symantec.custhelp.com

Phone number: 1-800-721-3934

Email: license@symantec.com

Check this article as well

https://www-secure.symantec.com/connect/articles/s...

Then you can download software from https://fileconnect.symnatec.com & it's a zip file & size is around 1.5 GB.

Once the download finishes successfully, extract the contents of the compressed file to a location of your choice.

From SEP 12.1 RU1 onwards Symantec is giving an option to download full product in two parts i.e. par1 & part 2 or download individual files like SEPM setup, SEP 32 bit setup, SEP 64 bit setup, Tools as per requirement.

It gives more leverage to the Symantec customer to choose what he wants. In many cases it's seen that customer used to require only SEP setup and unnecessarily he had to download entire zip file which is around 1.5 GB in size.

Contact Us

http://www.symantec.com/partners/support/contact-us.jsp

Assistant & Information

http://www.symantec.com/support/assistance_information.jsp

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
kulwant's picture

Thank for the nice description smiley

Kulwant Singh   Loyfly

0
Login to vote
Ramy34's picture

In my case some agents recognize SEP 12.1 and some doesn't. The ones that recognize it....emit events that the PC is not protected...and then I get event - "yes, it's protected"...kind of weird.
Does anybody apply any working fix.

0
Login to vote
Chetan Savade's picture

Hi,

Could you please provide more info on this?

If possible attach the screen shot.

If machines definitions are not updated then you might see the message that PC is not protected. However once the definitions updated it will change the status to it's protected.

It's happening on end user machine or on the SEPM console?

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
pete_4u2002's picture

any screenshot that can be posted for reference?

0
Login to vote
irtezaahsan's picture

Hi All,

In our environment we are running SEPM 12.1.1 with SQL Server (Cluster) , As SEP 12.1 SEPM upgrade installer requires three times the current database size (sem5.db) if upgrading from pre-12.1 SEPM with the embedded database only.

what will be the size of database (SQL Server on cluster) required to upgrade to SEPM 12.1.2 ?? 

0
Login to vote
Chetan Savade's picture

Hi,

SEPM and SQL cluster are installed on the same machine? If yes what's the size of SEPM SQL database?

If SQL is on remote machine then few GB space (4-5 GB) should be sufficient to complete an upgrade.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote
irtezaahsan's picture

Chetan,  yes Sql is on remote machine and almost 10 GB space is free on the SEPM machine. 

0
Login to vote
Chetan Savade's picture

Hi,

In that case I don't think you should face any problem.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

0
Login to vote