Video Screencast Help
Scheduled Maintenance: Symantec Connect is scheduled to be down Saturday, April 19 from 10am to 2pm Pacific Standard Time (GMT: 5pm to 9pm) for server migration and upgrades.
Please accept our apologies in advance for any inconvenience this might cause.

Compate between 11.x and 12.x

Created: 07 Aug 2012 • Updated: 14 Sep 2012 | 12 comments
This issue has been solved. See solution.

Hi Team,

Please give me Compare between 11.X Vs 12.X .

Comments 12 CommentsJump to latest comment

W007's picture

Few differences between SEP 11 Enterprise Edition and SEP 12.1 Enterprise Edition

https://www-secure.symantec.com/connect/articles/few-differences-between-sep-11-enterprise-edition-and-sep-121-enterprise-edition

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Simpson Homer's picture

 

There are many differences between SEP 11.x and SEP 12.1 a few are listed below.

SEP 11.x can create package with only two options i.e. reboot is required or not

Reboot Manager is a new feature it manages reboot at the endpoints.

Ability to schedule reboots.

Gives more power to the SEPM admin(s) to manage reboot at the endpoints

 

SEP 11.x have only resetpass.bat to reset password

•   Configurable Password Recovery options

•    Passwords can be recovered via Email

SEP 11.X is paper license product, no software license needed to activate product

SEP 12.1 is license product.

•    Advantage: Expired license cannot submit suspicious files to Symantec site.Only a registered and paid customer can submit files to the Insight database to avoid poisoning from malware authors.

•    Customers and partners can keep track of license usage.

•      Symantec License Format, SLF, (like other Symantec software) is used.

 

         

In SEP 11.x there are no any predefined notifications.

In SEP 12.1 there are predefine reports like AV definitions out of date, license expire, over deployed clients.  It will help you to monitor SEPM status.

 

SEP 11.x can support up to 50,000 clients per server

SEP 12.1 can support up to 80,000 clients per server

SEP 11.x you will have to break SEPM’S replication before performing upgrade

SEP 12.1 onwards there is no need to break replication before product upgrade.

Starting in SEP 12.1, replication performs version checking

Eliminates cross version replication corruption.

 

SEP 11.x firewall have limited support for IPV6--can only Allow All or Block All IPV6 traffic.

SEP 12.1 firewall supports IPV6 and NDIS5/NDIS6.

-Decoupled FW Dependencies with AV/DC/IDS

-Improved Windows Firewall Integration

-Improved IDS Reporting and Error Handling
Main Features:
-FW rule for TCP/UDP is now effective for both ipv4 and ipv6 traffic.

-All FW rule columns are applied for both ipv4 and ipv6 traffic.

-Traffic, Packet, Security Logs can display ipv4/ipv6 addresses.
Exceptions/Limitations:
-The FW rule does not allow user to specify ipv6-only address, i.e. must use "All hosts" for the Hosts column--this means all ipv4 and ipv6 addresses.
-No support yet for IPv6 tunneling (ISATAP, Teredo, etc).
 

SEP 11.x doesn’t support application and device control policy on 64 bit OS

SEP 12.1 does support application and device control policy on 64 bit OS

with few limitations

 

Features supported on 64 bit OS         

AV                                                                  

Proactive threat Scan (a.k.a truscan or Sonar)     

Bloodhound                                                     

Malheur                                                           

Tamper Protection                                            

Internet email scanning

Device Control

Firewall

IPS

Application learning

Host Integrity (SNAC)

 

 

IIS is mandatory in SEP 11.X. Reporting issues are commonly observed due to IIS issue.

SEP 12.1 has replaced IIS with Apache, dependency is removed from IIS.

 

Database maintenance was concern with SEP 11.x with day to day increase in Size.

Improve database efficiency through automatic maintenance

SEP 11.x is using third party software’s with old engines

SEP 12.1 is using third party software with latest engines.

•          Tomcat Upgrade From v4.1.25 To v6.0.29

•          Embedded Sybase DB Upgrade from v9x to v11.0.1.2472

•          JRE Upgrade to v1.6u21

•          PHP Upgrade to v5.3.3

 

SEP 11.x are not supporting with latest operating systems

SEP 12.1 now support latest market operating systems, it does support now Small business Server 2008, 2011.

 

http://www.symantec.com/docs/TECH163806

 

SEP 11.x will stop support around 2014

 

SEP 12.1 will have more life span compare to SEP 11.x

SEP 11.x policies are not updated to latest threat

Upgraded Default Polices Tuned for Today’s Threat Landscape

New ICMP Trigger for Location Awareness

Improved Tamper Protection

 

When you export package through SEP 11.x, it contains old definitions when SEPM was installed first time or upgraded last time

SEP 12.1 export package with latest definitions.

SEP 11.x shows succeeded (if package copied successfully) status even though SEP clients is not installed successfully

Clients register in console as soon as installation starts, enables rich detail on install status

Reports now show

-Success

-Errors

-Rollbacks

-Unsupported Operating systems

-Reboot required

 

SEP 11.x upgrade failure may cause client to not protect system, SEP client may become inactive

SEP 12.1 uses an MSI based, Side-by-Side, Replace on Reboot installation system.

This method never leaves the client without protection, even in case of upgrade failure.

 

PTP feature is not supported on Server operating systems

PTP feature is supported on server operating systems.

Scan performance is low

Scan performance is significantly improved in SEP 12.1

SEPM can’t be install on windows 7

SEPM can be install on windows 7

SEP 11.x cannot manage Mac OS through console

SEP 12.1 can manage Mac OS through console

SEP 11.x have 15 firewall rules

SEP 12.1 have 26 built in default firewall rules

SEP 11.x administrator have limitation while providing access to other administrator

By default, administrators have access to all features in a single domain. That is, the administrator can view and run reports, manage groups, remotely run commands, manage installation packages, and manage policies for that domain. The administrator can also run reports on all groups in the domain, except for any groups that migrated from Symantec Antivirus 10.x. You must explicitly configure reporting rights to these migrated groups.

Also, you can grant site rights to administrators to authorize them to fully manage a site, which includes managing the database and servers. When you create a new administrator, the administrator is not authorized to manage sites. You must explicitly grant site privileges to allow the administrator to fully manage sites in a single domain.

Live update is slower compare to SEP 12.1

Live update is faster than sep 11.x, using latest live update engine, luall.exe will download update for SEP only. luall.exe will work on SEPM only, it won't work on SEP client in SEP 12.1

P

 

Mithun Sanghavi's picture

 

Hello,

Symantec Endpoint Protection 12.1 is better than Symantec Endpoint Protection 11

Symantec Endpoint Protection 12.1 is newer and better.

 

Few differences between SEP 11 Enterprise Edition and SEP 12.1 Enterprise Edition

https://www-secure.symantec.com/connect/articles/feature-differences-between-sep-11x-and-sep-121

 

Symantec Knowledgebase Articles:

1) Symantec Endpoint Protection Getting Started Guide 12.1

http://www.symantec.com/docs/DOC4322

2) What's new in version 12.1

http://www.symantec.com/docs/HOWTO55189

3) What is new in Symantec Endpoint Protection 12.1?

http://www.symantec.com/docs/TECH163413

4) Planning for Migration to Symantec Endpoint Protection Manager 12.1

http://www.symantec.com/docs/TECH162730

I have attached the Comparision chart which may help you decide...!!!

AttachmentSize
21169174_GA_QR_SEP_12.1Feature_Comparison_Chart.01.11_0_0.pdf 1.76 MB

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Anil kondalkar's picture

Kindly confirm  on the point SEPM 11.0 cant support Windows 7,

Mithun Sanghavi's picture

Hello,

SEPM 11 is not supported on Windows 7 OS. Chech the System Requirements - http://www.symantec.com/docs/TECH165172

SEP 11.0.5002 client supports the Windows 7 machines.

Secondly, check these articles - 

About Endpoint Protection support for Windows 7 and Windows Server 2008 R2

http://www.symantec.com/docs/TECH94910

and 

https://www-secure.symantec.com/connect/articles/could-not-install-symantec-endpoint-protection-manager-windows-7-home-premium-64-bit-operat

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

W007's picture

11.0.5, it may work but is not supported. Symantec support will not be able to help resolve any issues that you may experience with your SEP environment.

https://www-secure.symantec.com/connect/forums/installing-sepm-windows-7

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Simpson Homer's picture

SEP client is supported on Windows 7 from 11.0.5 onwards but not SEPM.

Dushan Gomez's picture

what about the performance difference in the client ?

Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP

 

Mithun Sanghavi's picture

Hello,

SEP 12.1 gives Unrivaled security. Blazing performance. Built for Virtual Environments.

We've worked hard to further the unrivaled security and blazing performance for which Symantec Endpoint Protection is known. Built for virtual environments it has dramatically improved performance, and a new state-of-the-art protection system – Symantec Insight. Symantec Endpoint Protection 12.1 includes hundreds of new features for improved security, performance and management.

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SOLUTION
Dushan Gomez's picture

thanks Mithun !

Yes i have successfully implemented v 12.1 RU1 and now still considering to upgrade it into v 12.1 RU1 MP1

Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP