Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

How to change Ip address In sepm

Created: 05 Oct 2012 • Updated: 16 Oct 2012 | 7 comments
This issue has been solved. See solution.

Hi,

I Want to change my SEPMserver ip Address,Kindly provide any problem after changing the sepm server IP change.

Comments 7 CommentsJump to latest comment

Seyad's picture

 Hi Suryakant,

Changing the IP address of the SEPM server may affect two things.

1) Client-Server communication.

2) Replication between two SEP Managers (if applicable).

 

If you have only one SEP Manager in your network, follow

http://www.symantec.com/docs/TECH98430

 

If you have more than one SEP Manager in your network and If you have replication configured on the SEPM Manager in which you need to change the IP address, follow

http://www.symantec.com/docs/TECH96090

22Aug's picture

Hi,

Build a new SEPM with replication and make necessary changes in the MSL for clients to direct to communicate to new SEPM.

Mithun Sanghavi's picture

Hello,

The SEP clients contact the SEPM using the IP address. So, as long as your client machines are able to contact the new server on the installation port and IP address of the server, the migration should be fine.

You’ll be happy to know this is fairly easy to accomplish. 

The SEP clients find the management server by looking in management server list they are configured to use.  By default when you install the SEP Manager it creates a default management server list that contains the IP address of the manager and it's name.  If you just change the address of the server SEPM will update this list but don’t just run and change it. 

You can create your own management server list and have the clients use it instead.  If you were to create a new Management server list with only the name of the management server it would force the clients to resolve the IP address of the management server from dns or NetBIOS and all should be well as long as you change DNS when you change the IP on the server. 

Another idea would be to create a new Management Server List with the IP address and name just like the default list but then add the new IP address that you will be changing the server to.  This way the clients will first try the old address, the new address, and then the name.

After you create the management server list under policies -> Policy Components you need to tell the clients to use the new list.  For this under the clients section select the group containing the clients and select communication settings under the policy tab at the top.  Select your management server list from the drop down.   It’s much easier then it sounds. 

Let me know if you need any other info. 

Reference: https://www-secure.symantec.com/connect/forums/recommended-procedure-sepm-manager-ip-address-change

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Chetan Savade's picture

Hello Suryakant,

The SEP clients find the management server by looking at the Management Server List they are configured to use.  By default when you install the SEP Manager it creates a default Management Server List that contains the IP address of the manager and its name.  If you just change the address of the server SEPM will update this list but that will not change the server being referrence by those clients which have already been deployed.

You can create your own Management Server List and have the clients use it instead.  If you were to create a new Management Server List with only the name of the management server it would force the clients to resolve the IP address of the management server from DNS or NetBIOS and all should be well as long as you change DNS when you change the IP on the server.

Prior to make any changes take necessary backups.

SEP 11.x: http://www.symantec.com/docs/TECH102333

SEP 12.1: http://www.symantec.com/docs/TECH160736

You can refer the following steps as well:

1. Change the Management Server List (MSL): Policies > Policy Components > Management Server Lists > (edit the list in use - Group and Location Use Count)
Under 'Priority 1' add the new IP address in the form: <IP_address>:<port>

Example:
- 192.168.1.1:8014

Note: If you are using the default MSL you have to create a new Management Server List and add the existing IP addresses/hostnames (as the default) and add the new IP address as well - so that you have the current and the future IP addresses. In alternative, Copy/Paste the existing MSL and give it a different name.

2. After, select Ok and Assign the new list to your client groups.

3. Select each group > right-click and select Run Command on Group > Update Content, to update the current settings in all clients (this also helps to assure that they receive the new MSL)

4. Assure that all the clients have the latest policy version

5. Then, it should be ok to change the IP address of the SEPM server

6. The procedure can be repeated to remove the old IP address from the MSL

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<