Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Can GUP Upgrade my Clients

Created: 17 Jul 2013 • Updated: 29 Jul 2013 | 7 comments
This issue has been solved. See solution.

Hi All,

I am Using SEPM 12.1 RU2 and clients of same version.

There are multiple number of GUP's in my network

Query:-

If i'll Upgrade My GUP Systems to the latest RU3, will all my clients that are taking Update from my GUP will Upgrade Automatically?

(Note:- am not going to Upgrade my SEP Manager)

What will happen if my SEPM is lower version as compared to GUP System after Upgrading them to RU3, will it be able to update all Definations and Patches required by RU3?

Operating Systems:

Comments 7 CommentsJump to latest comment

.Brian's picture

No, GUPs cannot upgrade clients. They only provide content updates.

12.1 SEPM can support any client version of 12.1 although it is always recommended to be on the same version for client and SEPM.

http://www.symantec.com/docs/TECH200234

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

SOLUTION
Mithun Sanghavi's picture

Hello,

Here are the Answers:

If i'll Upgrade My GUP Systems to the latest RU3, will all my clients that are taking Update from my GUP will Upgrade Automatically?

No. GUP clients cannot upgrade the SEP client with install packages.

What will happen if my SEPM is lower version as compared to GUP System after Upgrading them to RU3, will it be able to update all Definations and Patches required by RU3?

It is recommended to have the SEPM and GUP clients of the same version. Group Update Providers that run earlier versions of Symantec Endpoint Protection cannot deliver content updates to clients that run the current release of Symantec Endpoint Protection.

Check this:

Q: What's the recommended migration order? What do I migrate first in my environment?

A: The recommended order is to upgrade all Symantec Endpoint Protection Managers, Group Update Providers, and then the remaining clients as needed."

Reference: http://www.symantec.com/docs/TECH163700

Check these Articles:

About Group Update Providers and legacy software releases

http://www.symantec.com/docs/HOWTO55344

About the types of Group Update Providers

http://www.symantec.com/docs/HOWTO80957

Managing Symantec Endpoint Protection 12.1 RU2 clients with earlier version managers

http://www.symantec.com/docs/TECH200234

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

AJ_01's picture

If i'll Upgrade My GUP Systems to the latest RU3, will all my clients that are taking Update from my GUP will Upgrade Automatically?

No. GUP is only provide the defintion to clients. For the client upgradation you can use the RemoteClient.EXE(Client Deployment Wizard)

http://www.symantec.com/connect/articles/overview-push-deployment-wizard-symantec-endpoint-protection-121

What will happen if my SEPM is lower version as compared to GUP System after Upgrading them to RU3, will it be able to update all Definations and Patches required by RU3?

SEPM 12.1 will support all version even it is lower or higher but recommended you that you can upgrade you server with 12.1.3

Regard

AJ

Chetan Savade's picture

Hello,

Thank you for posting in Symantec community.

I would be glad to answer your query.

If i'll Upgrade My GUP Systems to the latest RU3, will all my clients that are taking Update from my GUP will Upgrade Automatically?

--> No, It's not possible at this point. Ideas have been raised in the past for the same. One of them I have listed here

https://www-secure.symantec.com/connect/idea/upgrade-package-groups-function-give-option-have-clients-update-group-update-provider-gup

What will happen if my SEPM is lower version as compared to GUP System after Upgrading them to RU3, will it be able to update all Definations and Patches required by RU3?

--> Group Update Providers that run earlier versions of Symantec Endpoint Protection cannot deliver content updates to clients that run the current release of Symantec Endpoint Protection.

You cannot use multiple Group Update Providers with the legacy clients that run versions of Symantec Endpoint Protection earlier than version 11.0.5 (RU5).
 
Refer this article to know more about it: About Group Update Providers and legacy software releases
 

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

SameerU's picture

Hi

You cannot upgrade clients through GUP.

GUP provides the content updates to the clients

Regards

AjinBabu's picture

Hi, 

No GUP can not perform this.

About upgrading client software

You can use several methods to upgrade Symantec client software. Some methods can take up to 30 minutes. Therefore, you may want to upgrade client software when most users are not logged on to their computers.

Table: Methods to upgrade Symantec Endpoint Protection and Symantec Network Access Control client software

Upgrade method

Description

AutoUpgrade

Use AutoUpgrade to update clients in one or more groups from the Symantec Endpoint Protection Manager console.

LiveUpdate Settings policy

Configure a LiveUpdate Settings policy for a group that defines a LiveUpdate server and allows clients to run LiveUpdate.

Product disc

Use the installation program on the product disc to install a new version of the client.

Other methods

Use one of the other supported methods of installing client software.

If the Symantec Network Access Control client is also installed, you should upgrade both the Symantec Endpoint Protection client and the Symantec Network Access Control client. You can assign both the Symantec Endpoint Protection package and the Symantec Network Access Control package to the same group. In this case, make sure that the Maintain Features option is selected.

Upgrading clients by using AutoUpgrade

The AutoUpgrade process lets you automatically upgrade the Symantec Endpoint Protection client software for all the clients that are contained in a group. For example, you can use AutoUpgrade to upgrade clients to a new maintenance release or product version.

You must test the AutoUpgrade process before you attempt to upgrade a large number of clients in your production network. If you do not have a test network, you can create a test group within your production network. For this kind of test, you add a few non-critical clients to the test group and then upgrade them by using AutoUpgrade. You confirm that the upgrade completed successfully by verifying the version number of the client software. The version number is displayed in the client's Help >About panel.

To upgrade clients by using AutoUpgrade

1.    In the Symantec Endpoint Protection Manager console, click Admin.

2.    Click Install Packages.

3.    Under Tasks, click Upgrade Clients with Package.

4.    In the Upgrade Groups Wizard panel, click Next.

5.    In the Select Client Install Package panel, select the appropriate client installation package, and then click Next.

6.    In the Specify Groups panel, select the groups that contain the client computers that you want to upgrade, and then click Next.

7.    In the Package Upgrade Settings panel, select Download from the management server.

You can optionally stage and select a package on a Web server.

8.    Click Upgrade Settings.

9.    On the General tab, select Maintain existing client features when updating.

You can optionally add or remove features when upgrading.

10.  Optionally, on the Notification tab, customize the user notification settings. You can customize the message that is displayed on the client computer during the upgrade. You can also allow the user to postpone the upgrade by an amount you specify.

For more information about schedule and notification settings, click Help.

11.  Click OK.

12.  In the Upgrade Groups Wizard Complete panel, click Next.

13.  Click Finish.

Upgrading to a new release

You can upgrade to the latest release of the product. To install a new version of the software, you must perform certain tasks to ensure a successful upgrade.

The information in this section is specific to upgrading from Symantec Sygate 5.1, or Symantec Endpoint Protection 11.x software in environments where a version of Symantec Endpoint Protection or Symantec Network Access Control 11.x is already installed.

Table: Process for upgrading to the latest Enterprise edition release

Action

Description

Back up the database

Back up the database used by the Symantec Endpoint Protection Manager to ensure the integrity of your client information.

Turn off replication

Turn off replication on all sites that are configured as replication partners. This avoids any attempts to update the database during the installation.

If you have Symantec Network Access Control installed, enable local authentication

Enforcers are not able to authenticate clients during an upgrade. To avoid problems with client authentication, Symantec recommends that you enable local authentication before you upgrade. After the upgrade is finished, you can return to your previous authentication setting.

Stop the Symantec Endpoint Protection Manager service

You must stop the Symantec Endpoint Protection Manager service prior to installation.

Upgrade the Symantec Endpoint Protection Manager software

Install the new version of the Symantec Endpoint Protection Manager on all sites in your network. The existing version is detected automatically, and all settings are saved during the upgrade.

Turn on replication after the upgrade

Turn on replication when the installation is complete to restore your configuration.

Upgrade Symantec client software

Upgrade your client software to the latest version.

When Symantec provides updates to client installation packages, you add the updates to a Symantec Endpoint Protection Manager and make them available for exporting. You do not, however, have to reinstall the client with client-deployment tools. The easiest way to update clients in groups with the latest software is to use AutoUpgrade. You should first update a group with a small number of test computers before you update your entire production network.

You can also update clients with LiveUpdate if you permit clients to run LiveUpdate and if the LiveUpdate Settings policy permits

Regards

Ajin

raju123's picture

The computer that is downloading and publishing the content is referred to as the “Group Update Provider.” They(Group Update Provider) not be provide the Upgrade install Package to any client systems.

You can have the best option is Autoupgrade feature but your server version is lower. So i am suggested you that you can also upgrade your server in SEPM 12.1 RU3.

http://www.symantec.com/connect/articles/upgrade-clients-sep-121-auto-upgrade-feature

https://www-secure.symantec.com/connect/videos/upgrade-clients-sep-121-using-auto-upgrade-feature