Video Screencast Help
Give us your opinion and win with Symantec! Please help us by taking this survey to tell us about your experience with Symantec Connect, so that we can continue to grow and improve.  Take the survey.

how SEP auto-upgrade works

Created: 17 Sep 2013 | 3 comments
Rinoa21's picture

On my SEPM 12.1 RU 3 we we're upgrading clients using auto-upgrade. Out of 20 clients all online only 3 was upgraded. Can someone explain how SEP auto-upgrade works?

  • No schedule was set under UPGRADE SCHEDULE.
  • Heartbeat interval is 30 minutes
  • Randomization is enabled 5 minutes
  • Out of 3 clients that has been upgraded. Two clients shows on the SEPM that they need restart but the other one we need to double check to see if it needs restart

we want to check how this works and why other client is not upgrading

Operating Systems:

Comments 3 CommentsJump to latest comment

Mithun Sanghavi's picture


In the Enterprise version, you can use Upgrade Clients with Package to upgrade existing clients: 

However, the following cautions apply:

  • If you upgrade from 11.x and use Application and Device Control, you must disable the Application Control rule "Protect client files and registry keys." After the clients receive the new policy, you may upgrade using AutoUpgrade.

  • Due to possible bandwidth concerns, it is best to schedule AutoUpgrade for after hours. You can also stage and select a package on a web server when you run Upgrade Clients with Package, or you can use an alternate method to deploy the upgrade package.

AutoUpgrade is enabled by default for SEP SBE, but you can disable it. Go to the Computers page in the management console, right-click your Group, select Properties, and then click Disable Automatic Client Package Updates.


Best practices for upgrading to Symantec Endpoint Protection 12.1.3

Preparing Windows operating systems for remote deployment

Hope that helps!!

Mithun Sanghavi
Associate Security Architect


Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Brɨan's picture

What happens after you reboot an affected client? Does the upgrade start then?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Chetan Savade's picture


Thank you for posting in Symantec community.

I would be glad to answer your query.

Heartbeat interval is set to 30 mins so it may take some time to upgrade all the clients.

I would suggest to wait and watch.

You can decrease the heartbeat interval to see desired results more quickly.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<