Endpoint Protection

 View Only
  • 1.  Can GUP Upgrade my Clients

    Posted Jul 17, 2013 07:47 AM

    Hi All,

    I am Using SEPM 12.1 RU2 and clients of same version.

    There are multiple number of GUP's in my network

    Query:-

    If i'll Upgrade My GUP Systems to the latest RU3, will all my clients that are taking Update from my GUP will Upgrade Automatically?

    (Note:- am not going to Upgrade my SEP Manager)

    What will happen if my SEPM is lower version as compared to GUP System after Upgrading them to RU3, will it be able to update all Definations and Patches required by RU3?

     

     

     



  • 2.  RE: Can GUP Upgrade my Clients
    Best Answer

    Posted Jul 17, 2013 07:48 AM

    No, GUPs cannot upgrade clients. They only provide content updates.

    12.1 SEPM can support any client version of 12.1 although it is always recommended to be on the same version for client and SEPM.

    http://www.symantec.com/docs/TECH200234



  • 3.  RE: Can GUP Upgrade my Clients

    Trusted Advisor
    Posted Jul 17, 2013 07:54 AM

    Hello,

    Here are the Answers:

    If i'll Upgrade My GUP Systems to the latest RU3, will all my clients that are taking Update from my GUP will Upgrade Automatically?

    No. GUP clients cannot upgrade the SEP client with install packages.

    What will happen if my SEPM is lower version as compared to GUP System after Upgrading them to RU3, will it be able to update all Definations and Patches required by RU3?

    It is recommended to have the SEPM and GUP clients of the same version. Group Update Providers that run earlier versions of Symantec Endpoint Protection cannot deliver content updates to clients that run the current release of Symantec Endpoint Protection.

    Check this:

    Q: What's the recommended migration order? What do I migrate first in my environment?

    A: The recommended order is to upgrade all Symantec Endpoint Protection Managers, Group Update Providers, and then the remaining clients as needed."

    Reference: http://www.symantec.com/docs/TECH163700

    Check these Articles:

    About Group Update Providers and legacy software releases

    http://www.symantec.com/docs/HOWTO55344

    About the types of Group Update Providers

    http://www.symantec.com/docs/HOWTO80957

    Managing Symantec Endpoint Protection 12.1 RU2 clients with earlier version managers

    http://www.symantec.com/docs/TECH200234

    Hope that helps!!



  • 4.  RE: Can GUP Upgrade my Clients

    Posted Jul 17, 2013 07:55 AM

    If i'll Upgrade My GUP Systems to the latest RU3, will all my clients that are taking Update from my GUP will Upgrade Automatically?

    No. GUP is only provide the defintion to clients. For the client upgradation you can use the RemoteClient.EXE(Client Deployment Wizard)

    http://www.symantec.com/connect/articles/overview-push-deployment-wizard-symantec-endpoint-protection-121

    What will happen if my SEPM is lower version as compared to GUP System after Upgrading them to RU3, will it be able to update all Definations and Patches required by RU3?

    SEPM 12.1 will support all version even it is lower or higher but recommended you that you can upgrade you server with 12.1.3



  • 5.  RE: Can GUP Upgrade my Clients

    Broadcom Employee
    Posted Jul 17, 2013 09:08 AM

    Hello,

    Thank you for posting in Symantec community.

    I would be glad to answer your query.

    If i'll Upgrade My GUP Systems to the latest RU3, will all my clients that are taking Update from my GUP will Upgrade Automatically?

    --> No, It's not possible at this point. Ideas have been raised in the past for the same. One of them I have listed here

    https://www-secure.symantec.com/connect/idea/upgrade-package-groups-function-give-option-have-clients-update-group-update-provider-gup

    What will happen if my SEPM is lower version as compared to GUP System after Upgrading them to RU3, will it be able to update all Definations and Patches required by RU3?

    --> Group Update Providers that run earlier versions of Symantec Endpoint Protection cannot deliver content updates to clients that run the current release of Symantec Endpoint Protection.

    You cannot use multiple Group Update Providers with the legacy clients that run versions of Symantec Endpoint Protection earlier than version 11.0.5 (RU5).
     
    Refer this article to know more about it: About Group Update Providers and legacy software releases
     


  • 6.  RE: Can GUP Upgrade my Clients

    Posted Jul 18, 2013 05:52 AM

    Hi

    You cannot upgrade clients through GUP.

    GUP provides the content updates to the clients

    Regards

     



  • 7.  RE: Can GUP Upgrade my Clients

    Posted Jul 18, 2013 07:04 AM

    Hi, 

    No GUP can not perform this.

    About upgrading client software

    You can use several methods to upgrade Symantec client software. Some methods can take up to 30 minutes. Therefore, you may want to upgrade client software when most users are not logged on to their computers.

    Table: Methods to upgrade Symantec Endpoint Protection and Symantec Network Access Control client software

    Upgrade method

    Description

    AutoUpgrade

    Use AutoUpgrade to update clients in one or more groups from the Symantec Endpoint Protection Manager console.

    LiveUpdate Settings policy

    Configure a LiveUpdate Settings policy for a group that defines a LiveUpdate server and allows clients to run LiveUpdate.

    Product disc

    Use the installation program on the product disc to install a new version of the client.

    Other methods

    Use one of the other supported methods of installing client software.

    If the Symantec Network Access Control client is also installed, you should upgrade both the Symantec Endpoint Protection client and the Symantec Network Access Control client. You can assign both the Symantec Endpoint Protection package and the Symantec Network Access Control package to the same group. In this case, make sure that the Maintain Features option is selected.

     

    Upgrading clients by using AutoUpgrade

    The AutoUpgrade process lets you automatically upgrade the Symantec Endpoint Protection client software for all the clients that are contained in a group. For example, you can use AutoUpgrade to upgrade clients to a new maintenance release or product version.

    You must test the AutoUpgrade process before you attempt to upgrade a large number of clients in your production network. If you do not have a test network, you can create a test group within your production network. For this kind of test, you add a few non-critical clients to the test group and then upgrade them by using AutoUpgrade. You confirm that the upgrade completed successfully by verifying the version number of the client software. The version number is displayed in the client's Help >About panel.

    To upgrade clients by using AutoUpgrade

    1.    In the Symantec Endpoint Protection Manager console, click Admin.

    2.    Click Install Packages.

    3.    Under Tasks, click Upgrade Clients with Package.

    4.    In the Upgrade Groups Wizard panel, click Next.

    5.    In the Select Client Install Package panel, select the appropriate client installation package, and then click Next.

    6.    In the Specify Groups panel, select the groups that contain the client computers that you want to upgrade, and then click Next.

    7.    In the Package Upgrade Settings panel, select Download from the management server.

    You can optionally stage and select a package on a Web server.

    8.    Click Upgrade Settings.

    9.    On the General tab, select Maintain existing client features when updating.

    You can optionally add or remove features when upgrading.

    10.  Optionally, on the Notification tab, customize the user notification settings. You can customize the message that is displayed on the client computer during the upgrade. You can also allow the user to postpone the upgrade by an amount you specify.

    For more information about schedule and notification settings, click Help.

    11.  Click OK.

    12.  In the Upgrade Groups Wizard Complete panel, click Next.

    13.  Click Finish.



    Upgrading to a new release

    You can upgrade to the latest release of the product. To install a new version of the software, you must perform certain tasks to ensure a successful upgrade.

    The information in this section is specific to upgrading from Symantec Sygate 5.1, or Symantec Endpoint Protection 11.x software in environments where a version of Symantec Endpoint Protection or Symantec Network Access Control 11.x is already installed.

    Table: Process for upgrading to the latest Enterprise edition release

    Action

    Description

    Back up the database

    Back up the database used by the Symantec Endpoint Protection Manager to ensure the integrity of your client information.

    Turn off replication

    Turn off replication on all sites that are configured as replication partners. This avoids any attempts to update the database during the installation.

    If you have Symantec Network Access Control installed, enable local authentication

    Enforcers are not able to authenticate clients during an upgrade. To avoid problems with client authentication, Symantec recommends that you enable local authentication before you upgrade. After the upgrade is finished, you can return to your previous authentication setting.

    Stop the Symantec Endpoint Protection Manager service

    You must stop the Symantec Endpoint Protection Manager service prior to installation.

    Upgrade the Symantec Endpoint Protection Manager software

    Install the new version of the Symantec Endpoint Protection Manager on all sites in your network. The existing version is detected automatically, and all settings are saved during the upgrade.

    Turn on replication after the upgrade

    Turn on replication when the installation is complete to restore your configuration.

    Upgrade Symantec client software

    Upgrade your client software to the latest version.

    When Symantec provides updates to client installation packages, you add the updates to a Symantec Endpoint Protection Manager and make them available for exporting. You do not, however, have to reinstall the client with client-deployment tools. The easiest way to update clients in groups with the latest software is to use AutoUpgrade. You should first update a group with a small number of test computers before you update your entire production network.

    You can also update clients with LiveUpdate if you permit clients to run LiveUpdate and if the LiveUpdate Settings policy permits

     

    Regards

    Ajin



  • 8.  RE: Can GUP Upgrade my Clients

    Posted Jul 20, 2013 02:12 AM

    The computer that is downloading and publishing the content is referred to as the “Group Update Provider.” They(Group Update Provider) not be provide the Upgrade install Package to any client systems.

    You can have the best option is Autoupgrade feature but your server version is lower. So i am suggested you that you can also upgrade your server in SEPM 12.1 RU3.

    http://www.symantec.com/connect/articles/upgrade-clients-sep-121-auto-upgrade-feature

    https://www-secure.symantec.com/connect/videos/upgrade-clients-sep-121-using-auto-upgrade-feature