Issue with SEPM 12 - SEP 11.0.7 clients will not auto-upgrade
Created: 13 Dec 2012 | 16 comments
Hi,
I have recently upgraded my company's SEPM environment from SEPM 11.0.7 to SEPM 12.1.2015. Everything seems to be working fine with the upgraded SEPM server, and I can manually deploy SEP 12 to clients, but when I create an install package for SEP12 and assign it to a particular group, those clients in the group will not auto-upgrade to SEP 12. The auto-upgrade feature worked perfectly on the SEPM 11.0.7 environment.
Can anyone help?
Discussion Filed Under:
Comments 16 Comments • Jump to latest comment
Do you have restart system ?
Check this thread
https://www-secure.symantec.com/connect/forums/symantec-endpoint-protection-1212-client-push-problem
Thanks In Advance
Ashish Sharma
SEPM Knowledgebase Documents
Hi,
I have restarted the client with no luck. Have also tried all those things mentioned in the thread you sent. No luck still..
if you have set the schedule, uncheck it and restart the sep service on the client check if that updates.
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
How long has it been? Usually it will some time. What is your heartbeat set to?
SEP Knowledge Base
Endpoint SWAT
Heartbeat interval is 5 minutes. Our SEPM works on Push mode.
Heartbeat is only relevant for pull mode. Push keeps the connection open.
Did you set an upgrade schedule? Or is it unchecked?
SEP Knowledge Base
Endpoint SWAT
I've tried it with an upgrade schedule (00:00-23:59) and without an upgrade schedule. Still no luck.
enable sylink log that might give some answer.
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Hello,
In the Enterprise version, you can use Upgrade Clients with Package to upgrade existing clients:
How to upgrade Symantec Endpoint Protection clients by using Auto-Upgrade
However, the following cautions apply:
If you upgrade from 11.x and use Application and Device Control, you must disable the Application Control rule "Protect client files and registry keys." After the clients receive the new policy, you may upgrade using AutoUpgrade.
Due to possible bandwidth concerns, it is best to schedule AutoUpgrade for after hours. You can also stage and select a package on a web server when you run Upgrade Clients with Package, or you can use an alternate method to deploy the upgrade package.
AutoUpgrade is enabled by default for SEP SBE, but you can disable it. Go to the Computers page in the management console, right-click your Group, select Properties, and then click Disable Automatic Client Package Updates.
Reference:
Best practices for upgrading to Symantec Endpoint Protection 12.1.2
http://www.symantec.com/docs/TECH163700
Steps to prepare computers to install Symantec Endpoint Protection 12.1 client
http://www.symantec.com/docs/TECH163112
Hope that helps!!
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3
Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a
Hi, I'm aware of the above.
Also, we don't use any Application Control rules.
can you enable sylink and check the communication for package request?
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Is this what you mean?
12/13 16:33:04 [1316] <CSyLink::mfn_DownloadNow()>
12/13 16:33:04 [1316] Checking client package: <Client Package-Checksum: 06c909b4f4f59d8e6196a1fa641796d8, DownloadStartTime: 0:0, DurationMin: 1439, RandomizeTime: 2880>
12/13 16:33:04 [1316] <DownloadNow:>Not the time for download. Download start time:17:23:21 12/13/12
12/13 16:33:04 [1316] </CSyLink::mfn_DownloadNow()>
yes, it will start @ 5:23 PM as from the log.
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Yes, you're right, it did install, thanks for pointing me to the sylink.log.
The next question is, how do I change the time it takes to download the package. That took around 3+ hour. When we had a SEPM 11.0.7 environement, as soon as I moved a client to a particular group which had an install package (upgrade), the client would pick up the upgrade pretty much straight away. Is there any way to acheive this on the SEPM 12 environment? I couldn't find any options under the install package...
ok, thats good to know.
do not schedule this will make the client take the package as soon it get to know after its heartbeat and checks with SEPM.
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Hi,
After an upgrade to SEP 12.1 RU2 total how many packages are still listed under SEPM --> Admin --> Installed Packages, if possible remove legacy packages & check.
Helpful articles:
About client deployment methods
http://www.symantec.com/docs/HOWTO81302
Steps to prepare computers to install Symantec Endpoint Protection 12.1 client
http://www.symantec.com/docs/TECH163112
How to prepare computers for remote deployment
http://www.symantec.com/docs/HOWTO16365
Preparing Windows operating systems for remote deployment
http://www.symantec.com/docs/HOWTO81300
Installing Symantec Endpoint Protection clients remotely
http://www.symantec.com/docs/HOWTO59432
Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.&
Would you like to reply?
Login or Register to post your comment.