Endpoint Protection

I'm migrating our network from SAV 10 to SEP 11.  I have Symantec System Center installed on my desktop machine.  We have an AD file server and a web server in our network.  The AD server is the host for our users.  I followed the migration directions in order to prepare the SSC for migration.  As I install SEPM on my desktop, it finds the servers from SSC's settings, but gves me an error that it can't contact those servers and I cannot go further.  What do I need to do?  Should I install SEPM on the server instead or should it work as SSC does?

Thanks,
Bill

Hello, I 'm moving your post to the SEP 11/AV forum for better visibility. This forum is for SEP 12 SBE users.

Regards,
Thomas

Title: 'Error: "Failed to contact or import data from <Primary Server Name> server" when importing'
Document ID: 2008022612091748
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008022612091748?Open&seg=ent



Title: 'How To Migrate From Symantec Antivirus System Center Console To Symantec Endpoint Protection Manager'
Document ID: 2008110516140048
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008110516140048?Open&seg=ent

I had set up SSC as outlined in your second link.  I reset the PKI the way it outlines in the first link to no avail.  If I have to uninstall AV, as it suggests after resetting the PKI, wouldn't it make more sense to uninstall SAV and SSC and justy install SEP?

Thanks,
Bill

 Well are these things happening :

• Name resolution between the Primary Symantec AntiVirus server and Symantec Endpoint Protection Manager (SEPM) works
• The Remote Registry on the Primary Symantec AntiVirus server can be accessed from the Symantec Endpoint Protection Manager.
• The C$ and Admin$ shares on the Primary Symantec AntiVirus server can be accessed from the Symantec Endpoint Protection Manager.

Is your SSC server on a VM ?

Yes that is certainly possible , but in that case you will not be able to migrate your old policy in the new SEPM and neither your structure for the groups

Prachand, thank you.  The second solution listed in the PKI instructions suggests that I remove and reinstall both ssc and SAV.  It would seem that would be at least as time consuming as configuring in SEPM with no guarantee that SEPM will import old settings.  After I see what Vikram suggests, I may have to rebuild as suggested.

Vikram,

• Name resolution seems to work.  SEPM sees the servers by name.
• I'm afraid I don't know if Remote Registry is accessible.  How do I test for that?
• My ignorance once again rears it's ugly head. 

No, SSC is currently on my desktop machine.  I'm a member of the Administrators group on the network.  It's a Win2k3 AD network.  Running Win XP Pro.

My problem is that I'm trying to use the Migration wizard on the SEPM install.  When I try to import old settings on SSC (after config of SSC suggested by the migration instructions), the wizard sees the servers (the web server has is its own server status), but when it starts the import of settings, the wizard says 'Failed to contact or import data from <Primary Server Name> server" when importing'

How do I find out the answers to your second and third questions?

Thank you for your assistance,
Bill

To check the admin$ and C$

Title: 'Are the C$, ADMIN$, and IPC$ shares available?'
Document ID: 2009011915361948
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009011915361948?Open&seg=ent


To check remote registry service

Start -> Run -> Services.msc

Ensure that the remote registry service is started

Yes, Admin$, C$ and IPC$ are available.

Remote registry is started.

I didn't need to turn any of these on.

Does that help your diagnosis?

Thanks,
Bill

I'm trying to migrate the settings from SSC to SEPM.  It tells me how to configure SSC before the migration, but it also says that SSC will block migration if detected on the install machine.  Should I remove SSC from the machine that it's currently on?  Should I install SEPM on a different machine from SEPM?  Is that my problem or am I barking up the wrong tree?

If SEPM is installed on the a diffrent  then the migration will not work.

Now when pushing the packge in the migrtaion push it to all the machine except where SSC is installed,.
Once the packge is pushed and the cleints get installed, then Uinstall SSC  and then install SEP

Else

Install SEPM on the other machine, uinstall SSC and then install the SEP client

Configuration: AD01 = Server with SAV 10 - clients get definitions from there.
Machine1: Client and SSC host
Machine2: Client

I tried to install SEPM and migrate settings from SSC on Machine1.  Get the "Failed to contact or import data from <Primary Server Name> server" bit.

Then tried install SEPM on Machine2 and migrate settings from SSC (which has been open and unlocked on Machine1).  Same error.

Is it time to give up and uninstall SAV and Install SEP from scratch and reconfigure?

Maybe I'll uninstall everything and install Linux.  I'm a little too frustrated...

It seems that the PKI structure is corrupted thats the reason the migratiion is failing.

Install SEPM and rather then doing a migration from SAV, Create new groups in SEPM and create the package and then push the package to the the cleints.
the new package will first uinstall SAV and then install SEP
Once all the clients are installed , uinstall SSC and SAV from the server and then install SEP.

Installing and configuring Symantec Endpoint Protection 11.0 for the first time

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007082915561148