Endpoint Protection

 View Only

  • 1.  How to change Ip address In sepm

    Posted Oct 06, 2012 02:07 AM

    Hi,

    I Want to change my SEPMserver ip Address,Kindly provide any problem after changing the sepm server IP change.



  • 2.  RE: How to change Ip address In sepm

    Broadcom Employee
    Posted Oct 06, 2012 02:09 AM

    check these links

    SEPm 11

    http://www.symantec.com/business/support/index?page=content&id=TECH104389

    SEPM 12

    http://www.symantec.com/business/support/index?page=content&id=TECH171767



  • 3.  RE: How to change Ip address In sepm
    Best Answer



  • 4.  RE: How to change Ip address In sepm

    Posted Oct 06, 2012 08:32 PM

     Hi Suryakant,

    Changing the IP address of the SEPM server may affect two things.

    1) Client-Server communication.

    2) Replication between two SEP Managers (if applicable).

     

    If you have only one SEP Manager in your network, follow

    http://www.symantec.com/docs/TECH98430

     

    If you have more than one SEP Manager in your network and If you have replication configured on the SEPM Manager in which you need to change the IP address, follow

    http://www.symantec.com/docs/TECH96090



  • 5.  RE: How to change Ip address In sepm

    Posted Oct 07, 2012 12:16 AM

    Find the attach thread

    https://www-secure.symantec.com/connect/forums/changing-ip-address-sepm-server



  • 6.  RE: How to change Ip address In sepm

    Posted Oct 07, 2012 12:19 AM

    Hi,

    Build a new SEPM with replication and make necessary changes in the MSL for clients to direct to communicate to new SEPM.



  • 7.  RE: How to change Ip address In sepm

    Trusted Advisor
    Posted Oct 07, 2012 02:51 PM

    Hello,

    The SEP clients contact the SEPM using the IP address. So, as long as your client machines are able to contact the new server on the installation port and IP address of the server, the migration should be fine.

    You’ll be happy to know this is fairly easy to accomplish. 

    The SEP clients find the management server by looking in management server list they are configured to use.  By default when you install the SEP Manager it creates a default management server list that contains the IP address of the manager and it's name.  If you just change the address of the server SEPM will update this list but don’t just run and change it. 

    You can create your own management server list and have the clients use it instead.  If you were to create a new Management server list with only the name of the management server it would force the clients to resolve the IP address of the management server from dns or NetBIOS and all should be well as long as you change DNS when you change the IP on the server. 

    Another idea would be to create a new Management Server List with the IP address and name just like the default list but then add the new IP address that you will be changing the server to.  This way the clients will first try the old address, the new address, and then the name.

    After you create the management server list under policies -> Policy Components you need to tell the clients to use the new list.  For this under the clients section select the group containing the clients and select communication settings under the policy tab at the top.  Select your management server list from the drop down.   It’s much easier then it sounds. 

    Let me know if you need any other info. 

    Reference: https://www-secure.symantec.com/connect/forums/recommended-procedure-sepm-manager-ip-address-change

    Hope that helps!!



  • 8.  RE: How to change Ip address In sepm

    Broadcom Employee
    Posted Oct 08, 2012 05:41 AM

    Hello Suryakant,

    The SEP clients find the management server by looking at the Management Server List they are configured to use.  By default when you install the SEP Manager it creates a default Management Server List that contains the IP address of the manager and its name.  If you just change the address of the server SEPM will update this list but that will not change the server being referrence by those clients which have already been deployed.

    You can create your own Management Server List and have the clients use it instead.  If you were to create a new Management Server List with only the name of the management server it would force the clients to resolve the IP address of the management server from DNS or NetBIOS and all should be well as long as you change DNS when you change the IP on the server.

    Prior to make any changes take necessary backups.

    SEP 11.x: http://www.symantec.com/docs/TECH102333

    SEP 12.1: http://www.symantec.com/docs/TECH160736

    You can refer the following steps as well:

    1. Change the Management Server List (MSL): Policies > Policy Components > Management Server Lists > (edit the list in use - Group and Location Use Count)
    Under 'Priority 1' add the new IP address in the form: <IP_address>:<port>

    Example:
    - 192.168.1.1:8014

    Note: If you are using the default MSL you have to create a new Management Server List and add the existing IP addresses/hostnames (as the default) and add the new IP address as well - so that you have the current and the future IP addresses. In alternative, Copy/Paste the existing MSL and give it a different name.

    2. After, select Ok and Assign the new list to your client groups.

    3. Select each group > right-click and select Run Command on Group > Update Content, to update the current settings in all clients (this also helps to assure that they receive the new MSL)

    4. Assure that all the clients have the latest policy version

    5. Then, it should be ok to change the IP address of the SEPM server

    6. The procedure can be repeated to remove the old IP address from the MSL