Endpoint Protection

Hi

I recently took over our SEP installation in the company I work in. Currently we have 5 different version of clients ranging from 12.0 Ru1 to 12.1.64 and i want all these versions consolidated into the latest branch.

We have around 3400 computers in our setup running on 1 SEPM (dual core 8gb ram) + 1 SQL (Dual core 8 gb ram) server which still seems live up to the requirements from symantec for our size.

I'm currently testing upgrades for each client version to the latest, and it seems to go through smoothly. I deploy by adding the Client install package to the Computer group. I figure this way i can do upgrades in increments so soften the load on our servers.

1. Version 12.1 and forward supports side by side installation, so these can be done silently without "any risk". Is this correct?
2. How do i keep track of the upgrade progress for clients, which ones went through without any problems and which ones failed? 

And of course if you have any other recommendations i would greatly appreciate it :)

1. Yes, you are correct :) It can be done silently. It does need a reboot but again, this can be done at the clients leisure.

2. You can run the computer status report and it will show clients that have been upgraded.

For 3400 clients, I would set the upgrade schedule to something like over 14 days time. This should keep your network small and from becoming a problem.

To be honest, the autoupgrade is pretty simple, I don't see it causing a problem.

These articles may be of use:

Upgrade Endpoint Protection 12.1 clients using AutoUpgrade

Upgrading Windows clients by using AutoUpgrade in Symantec Endpoint Protection

Hi,

Thank you for posting your query on Symantec community.

You haven't mentioned SEPM version details, first I would suggest to upgrade the SEPM to the latest version

SEP 12.1 RU6 MP2 (12.1.6465.6200) is the latest SEP version & now available on Flexnet to download..

It seems clients are on pretty old version ranging from 12.0 Ru1 (specifically this version sounds SBE client) to 12.1.64.x.x

I have listed SEP version details here, please check : https://www-secure.symantec.com/connect/blogs/symantec-endpoint-protection-release-details

Q. Version 12.1 and forward supports side by side installation, so these can be done silently without "any risk". Is this correct?

--> Yes, it can be installed silently. However, test the AutoUpgrade process before you attempt to upgrade a large number of clients in your production network. If you do not have a test network, you can create a test group within your production network. For this test, you add a few non-critical clients to the test group and then upgrade them by using AutoUpgrade. It seems you have already done some testing :)

In case face any problem assign the package by choosing an option reset client-server communication.

Screen-shot is attached to the reference.

Q . How do i keep track of the upgrade progress for clients, which ones went through without any problems and which ones failed? 

--> Actually there isn't any such GUI based report to show how many clients accepted package and who rejected etc.

When you assign auto upgrade package clients will show new version number once they upgraded successfully. You can pull out report as well to verify client version details.

Reboot is must to complete upgrade process. You can see reboot pending details on the SEPM home page, it can give you an idea those clients are waiting to complete the upgrade.

Hi Guys

Thx for the quick replies.

Nice to see that i weren't completly off based on the info i had found.

Sadly i can't mark 2 things as solution :/