Endpoint Protection

Hi People,

Can anyone let me know what is the best way to upgrade 400 workstations and then 350+ servers in multiple domains ?

as for the DMZ servers is handled by the Remote SEPM which is replicated to the Internal SEPM.

HI,

Check this artical.

https://www-secure.symantec.com/connect/articles/sep-121-best-practice-license-other-articles

Check your fourms

https://www-secure.symantec.com/connect/forums/how-do-i-deploy-sep-client-remote-site

use auto upgrade feature

http://www.symantec.com/business/support/index?page=content&id=HOWTO55058

Yes, Auto upgrade can be one of the easiest way to upgrade clients.

https://www-secure.symantec.com/connect/articles/sepm-121-auto-upgrade

ok so in this case i do not need to create upgrade group, just leave it in there and then randomize the upgrade timeframe ?

Yes, you don't need create upgrade group you can assgin in your Existing group but we Recommended before you can test in test group.

Note :You must test the AutoUpgrade process before you attempt to upgrade a large number of clients in your production network. If you do not have a test network, you can create a test group. You can add a few non-critical clients to the test group and upgrade them by using AutoUpgrade. You can confirm the upgrade completed successfully by verifying the version number of the client software that appears in the About dialog box.

It's always recommended to have Symantec Endpoint Protection Manager and SEP clients on the same version. 

Public Kb:

Upgrading clients by using AutoUpgrade

http://www.symantec.com/docs/TECH96789