Video Screencast Help

Endpoint Manager upgrade

Created: 27 Dec 2013 • Updated: 27 Dec 2013 | 5 comments

Hello to all,

We are currently running SEP version MR5 and plan to upgrade to version 12.1. I have 2 questions:

- We are finally deploying Windows 7 computers to our network and have started with just a few machines. Because the supported version for this OS is MR7 we'd like to create and deploy a SEP MR7 package. Can we have MR7 packages/clients deployed with the SEP Mgr still being on MR5? (We plan on migrating to 12.1, don't want to spend time on upgrading this server if we don't have to.

- For long term solution we will move to 12.1. Should we do inplace upgrade of the existing server (Windows 2003 32bit) or move over to a brand new server? If we do a brand new server is the process just to build a new SEP environment and if so...will the client deployments automatically overwrite the existing client settings with the new Mgr server as the management server?

Thanks for advance for any input.                

Operating Systems:

Comments 5 CommentsJump to latest comment

.Brian's picture

You can but its not recommended, with SEPM 11.x it can manage the same or lower versions but you may issues managing higher versions since the schema is different.

You can easily do an inplace upgrade from 11.x to 12.1.4. Some informative reading here:

Upgrading or migrating to Symantec Endpoint Protection 12.1.4 (RU4)

Article:TECH211821  |  Created: 2013-10-23  |  Updated: 2013-11-05  |  Article URL http://www.symantec.com/docs/TECH211821

 

Yes, once you upgrade the SEPM, client upgrade will still be linked back to it and they will report in to it.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

pete_4u2002's picture

moving to newest supported OS should be considered.

aaron_hubbard's picture

To answer your first question:

You can manage Symantec Endpoint Protection (SEP) 11 Release Update 7 (RU7) clients using a Relese Update 5 (RU5) manager, however, it is best practice to migrate your manager first. There aren't many major management changes between RU5 and RU7, but there were a lot between RU5 and previous versions.

It is also quite possible to manage 11.x clients from a 12.1.x manager, though it is not possible to manage 12.1.x clients from an 11.x manager.

 

To answer your second question:

It is possible to migrate your 11.x manager to 12.1. Your existing group structure, logs, and policies will all be migrated. the manager is a 32-bit application, so there isn't a huge advantage from moving a 64-bit platform unless you are planning on hosting other server applications on your manager, or are using either a local Microsoft SQL database, or the embedded database.

If you choose to create a new manager, you can either add it to the existing site (if you use Microsoft SQL for your database), or create a new site. Creating a new site, and then exporting, or pushing an upgrade package to your clients will cause them to connect to your new manager and apply whatever content and policies the new manager has, which would effectively overwrite any of your previous configurations - including communications settings.

P_K_'s picture

Please find the answers inline:

Can we have MR7 packages/clients deployed with the SEP Mgr still being on MR5?

--Yes, a SEP MR5 manger can manage a SEP MR7 client.Technically it is possible. Here is the kb that you are looking for

Does Symantec Endpoint Protection Manager function with different versions of SEP client?

http://www.symantec.com/business/support/index?pag...

It is recommended that the same version be used in all situations, however, Symantec Endpoint Protection Manager is backwards compatible with older versions of Symantec Endpoint Protection client.

https://www-secure.symantec.com/connect/forums/do-...

- For long term solution we will move to 12.1. Should we do inplace upgrade of the existing server (Windows 2003 32bit) or move over to a brand new server? If we do a brand new server is the process just to build a new SEP environment and if so...will the client deployments automatically overwrite the existing client settings with the new Mgr server as the management server?

For SEP 11.x, check this Article:

How to move Symantec Endpoint Protection Manager from one machine to another

http://www.symantec.com/docs/TECH104389

For SEP 12.1, check this Article:

How to move Symantec Endpoint Protection Manager 12.1 from one machine to another

http://www.symantec.com/docs/TECH171767

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

Chetan Savade's picture

Hi,

Thank you for posting in Symantec community.

I would be glad to answer your query.

RU5 SEPM can manage RU7 clients. In case you faced any issue then support will have limited scope to troubleshoot an issue.

To upgrade from SEP 11.x to SEP 12.1 can refer the following article.

https://www-secure.symantec.com/connect/articles/sep-11x-sep-121-upgrade-process-graphical-overview

Q. For long term solution we will move to 12.1. Should we do inplace upgrade of the existing server (Windows 2003 32bit) or move over to a brand new server? If we do a brand new server is the process just to build a new SEP environment and if so...will the client deployments automatically overwrite the existing client settings with the new Mgr server as the management server?

--> Following article should help you.

Hot to move SEPM from one server to another server.

https://www-secure.symantec.com/connect/articles/hot-move-sepm-one-server-another-server

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<