Video Screencast Help

Issue with SEPM 12 - SEP 11.0.7 clients will not auto-upgrade

Created: 13 Dec 2012 | 16 comments

Hi,

 

I have recently upgraded my company's SEPM environment from SEPM 11.0.7 to SEPM 12.1.2015. Everything seems to be working fine with the upgraded SEPM server, and I can manually deploy SEP 12 to clients, but when I create an install package for SEP12 and assign it to a particular group, those clients in the group will not auto-upgrade to SEP 12. The auto-upgrade feature worked perfectly on the SEPM 11.0.7 environment.

 

Can anyone help?

Comments 16 CommentsJump to latest comment

ssorga's picture

Hi,

 

I have restarted the client with no luck. Have also tried all those things mentioned in the thread you sent. No luck still..

Rafeeq's picture

if you have set the schedule, uncheck it and restart the sep service on the client check if that updates.

 

.Brian's picture

How long has it been? Usually it will some time. What is your heartbeat set to?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

ssorga's picture

Heartbeat interval is 5 minutes. Our SEPM works on Push mode.

.Brian's picture

Heartbeat is only relevant for pull mode. Push keeps the connection open.

Did you set an upgrade schedule? Or is it unchecked?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

ssorga's picture

I've tried it with an upgrade schedule (00:00-23:59) and without an upgrade schedule. Still no luck.

Mithun Sanghavi's picture

Hello,

In the Enterprise version, you can use Upgrade Clients with Package to upgrade existing clients: 

However, the following cautions apply:

  • If you upgrade from 11.x and use Application and Device Control, you must disable the Application Control rule "Protect client files and registry keys." After the clients receive the new policy, you may upgrade using AutoUpgrade.

  • Due to possible bandwidth concerns, it is best to schedule AutoUpgrade for after hours. You can also stage and select a package on a web server when you run Upgrade Clients with Package, or you can use an alternate method to deploy the upgrade package.

AutoUpgrade is enabled by default for SEP SBE, but you can disable it. Go to the Computers page in the management console, right-click your Group, select Properties, and then click Disable Automatic Client Package Updates.

Reference: 

Best practices for upgrading to Symantec Endpoint Protection 12.1.2

http://www.symantec.com/docs/TECH163700

Steps to prepare computers to install Symantec Endpoint Protection 12.1 client

http://www.symantec.com/docs/TECH163112

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

ssorga's picture

Hi, I'm aware of the above.

 

Also, we don't use any Application Control rules.

pete_4u2002's picture

can you enable sylink and check the communication for package request?

ssorga's picture

Is this what you mean?

 

12/13 16:33:04 [1316] <CSyLink::mfn_DownloadNow()>
12/13 16:33:04 [1316] Checking client package: <Client Package-Checksum: 06c909b4f4f59d8e6196a1fa641796d8, DownloadStartTime: 0:0, DurationMin: 1439, RandomizeTime: 2880>
12/13 16:33:04 [1316] <DownloadNow:>Not the time for download. Download start time:17:23:21 12/13/12
12/13 16:33:04 [1316] </CSyLink::mfn_DownloadNow()>

ssorga's picture

Yes, you're right, it did install, thanks for pointing me to the sylink.log.

 

The next question is, how do I change the time it takes to download the package. That took around 3+ hour. When we had a SEPM 11.0.7 environement, as soon as I moved a client to a particular group which had an install package (upgrade), the client would pick up the upgrade pretty much straight away. Is there any way to acheive this on the SEPM 12 environment? I couldn't find any options under the install package...

pete_4u2002's picture

ok, thats good to know.

do not schedule this will make the client take the package as soon it get to know after its heartbeat and checks with SEPM.

Chetan Savade's picture

Hi,

After an upgrade to SEP 12.1 RU2 total how many packages are still listed under SEPM --> Admin --> Installed Packages, if possible remove legacy packages & check.

Helpful articles:

About client deployment methods

http://www.symantec.com/docs/HOWTO81302

Steps to prepare computers to install Symantec Endpoint Protection 12.1 client

http://www.symantec.com/docs/TECH163112

How to prepare computers for remote deployment

http://www.symantec.com/docs/HOWTO16365

Preparing Windows operating systems for remote deployment

http://www.symantec.com/docs/HOWTO81300

Installing Symantec Endpoint Protection clients remotely

http://www.symantec.com/docs/HOWTO59432

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<