Endpoint Protection

Hi Everyone,

In our environment there are more than 30000 SEP clients across various location throughout India.

Now we have 8 to 9 SEPM's to manage the Clients & we also have GUP's across multiple sites.

Now we have decided to keep a single server(Only one SEPM) that would handle 30,000 SEP Clients

What would be the secure way to change the IP Address of the server?

What Would be the pros & cons if some of the clients didn't notice the change due to offline,Corruption of setup,Error in Replacement of sylink Etc?

{Note:- Versions of Symantec Endpoint Protections are MR4 MP2 & RU6 MP2}

are these SEPM's replicating /loadbalance?

This servers are Configured in Replication failover and load balancing.

you can check this video for changinf the IP address

https://www-secure.symantec.com/connect/videos/changing-sepm-server-name-and-ip-address

check this link

http://www.symantec.com/business/support/index?page=content&id=TECH104389

configure the MSL list and apply to all the groups.

Under MSL priority 1 should be the SEPM which will be available after you decomission other SEPM servers.

Once  ALL the clients report to that SEPM, you remove the other server.

Will that have any effect on the Database?

Thanks & Regards

Anil.

Since you will have 1 SEPM, all the clients will talk to this SEPM and the DB hence the size might grow . If you have enabled replication already then it will not impact on log sizing.

You may need to increase the heartbeat when you are connecting to 1 SEPM to lower the processing.

You should also set GUP's in case if you have not.