Endpoint Protection

 View Only

  • 1.  How do I push an client update (install package) to clients in SEPM

    Posted Jan 07, 2013 02:57 PM

    Hello,

    I just upgraded 11.0.600 to 11.0.7300.1294 and I can't figure out how to distribute this update to the desktop clients.  I can see the install package and have added it to the groups that my desktops are in.  I've tried a couple of times by adding the install package and setting a time frame to distribute it over 3 days.  However, the clients never upgrade.

     

    I see the green dot on all the clients

    The live update policy is setup with "Download Symantec Endpoint Protection product updates using a Liveupdate server" enable.  Liveupdate scheduling is enabled  and set for every 6 hours with a 1 hour retry window and 2 hour randomization.  Server settings are set to: use the default mgmt server" and " use a live update server" both checked off, with "use the default symantec liveupdate server" selected.

     

    I remember in a very old version of SEPM you could right click on a client and push a version upgrade... has Symantec removed that? 



  • 2.  RE: How do I push an client update (install package) to clients in SEPM

    Posted Jan 07, 2013 03:03 PM

    Try restarting the smc service on one of the clients and letting it check back in. Since you set the time frame over 3 days, it may take some time.

    How long has it been?

    The other issue is an upgrade from 11.0.6 to 11.0.7300 is unsupported. You would've needed to go to 11.0.7100 first than to 11.0.7300. Or you could've went from 11.0.6 to 12.1.2



  • 3.  RE: How do I push an client update (install package) to clients in SEPM

    Posted Jan 08, 2013 06:12 PM

    Hi BEU--

    I can see the install package and have added it to the groups that my desktops are in. I've tried a couple of times by adding the install package and setting a time frame to distribute it over 3 days.  However, the clients never upgrade.

    This sounds like AutoUpgrade. Without more info it's hard to say why it's failing: did you upgrade the SEPM in that unsupported manner (see Migrating to Symantec Endpoint Protection 11.0.7300 (RU7 MP3))? Are the client packages of the same language of what's already on the clients? Could it be a known issue in the version of the SEPM you're using? What is/are the clients' OS/es?

    The live update policy is setup with "Download Symantec Endpoint Protection product updates using a Liveupdate server" enable.

    This would allow SEP clients to update via LiveUpdate. I don't know if the product updates to go from RU6 > RU7 > RU7 MP3 are actually available via LiveUpdate.

    You could get client-side patches and install them directly. Or you could use the Migration and Deployment Wizard (which is to what I think you were referring) to send out an updated package.

    However... if you did the SEPM install in the unsupported manner, you may have more problems than this in the long run, so you may want to uninstall and reinstall (with disaster recovery to preserve communication, and with a database backup if you have one from before the upgrade), then do the correct installation path (RU6 > RU7 > RU7 MP3). Or you can uninstall and reinstall RU7 MP3 fresh with the install setting to reset client communication.

    Sorry for all the links. I hope something here helps. Good luck!

    sandra