Endpoint Protection

Installed MR4 MP2 on a couple of my test servers and clients.  The upgrade went smoothly on the servers and the auto-upgrade feature actually worked.  So far so good!

Good to hear. How long have you been monitoring?

Not available to us poor folk yet  ;-(

;-)

Haven't seen hide nor hair of it......... nor a "what's new" doc.

Is the upgrade from an http server feature back?  I miss this feature it made it nice to keep upgrade traffic local to my offices.

Yes, upgrading from HTTP is back.

Other changes can be found in the release notes

Thanks was off work today and was hoping it was back didnt see it clearly listed in release notes.  That is my number one reason to fast track this upgrade for us.

Yes, that is correct. In MR4 MP1a, when you ran the "Upgrade Groups Wizard", the only option was to "Download from the management server". The "Download from the follow URL" was greyed out. In MR4 MP2 both options are now available.

The release notes doesn't say anything about which version is needed prior to install MR4 MP2. Does anybody know if MR4 MP2 can be installed over any versions of Symantec Endpoint Protection?

I'm not sure but I would also like to know the answer to this.

Guys that is one impressive list of fixes, and some close to my own heart are there - such as the SQL password issue, not accepting characters that SQL AND Microsoft accepted, forcing us to create new user with simple password.
Nice!  Good job.
I'm really pumped about this next MP.
Too bad we multi-tier folks are the LAST to see it!  ;-)  After-all, we pay more because we're buying more!

Hi,

as a supported migration path, MR4 MP2 can be installed only over MR4 and MR4 MP1a or as fresh installation.

On the plus side of being last, you'll also be the last one to get the bugs from updates. And by then it could have been solved already. :D

I usually wait a week or so before applying non-critical updates just to be sure it is tested and stable.

Sadly I am not in the position to view this as a non critical update. Like every other 11 series update all I can do is hope the new issues are less painful than the old issues.

It's up on file connect now.

Hi Giuseppe,

First of all: If MR4 MP2 can't be installed over any versions of SEP why isn't it written in the release notes?

According to you it can only "be installed over MR4 and MR4 MP1a". Then I'd like to know why it can't be installed over MR4 MP1?

Please answer clearly, it's enough frustrating already.

I would like to see the upgrade path in the release notes too.  You should be able to upgrade from MR4 MP1.  It probably wasn't mentioned since this version was pulled and replaced with MR4 MP1A.

Hi Team,

May we also know the link where the files for  MR4 MP2 are?
The latest updates so we could read it before the install in the near future.

Thanks.

It was posted above, but here it is again: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid_p/2007121216360648

The link for the actual files depends on what kind of support you purchased from Symantec.  I'm only on Gold support, so I would go here: https://fileconnect.symantec.com

Platinum support, you can go here: https://www-secure.symantec.com/platinum/login.html

Client only patches: ftp://ftp.symantec.com/public/english_us_canada/products/symantec_endpoint_protection/11.0/updates/

In our fileconnect, in the page "File Selection", in the Product Description  is written:
Symantec Endpoint Protection MR4 MP2 (11.0.4.4202) provides customer fixes since the release of MR4 and MR4 MP1. This maintenance patch cannot be installed over any versions of Symantec Endpoint Protection or Symantec Endpoint Protection Manager prior to MR4. It must be installed over MR4 or MR4-MP1.
It is possible to install the MR4 MP2 over the MR4 MP1, I simply forgot to mention the bad release that nobody should still have installed.

Just installed MP2 on our servers, no problem at all. So this is promising:-))

Lets make sure we are all on the same page here.   I have upgraded my SEPM servers successfully.  Now the bulk of my clients out there are still running MR3 mainly due the the fact that the ability to have the remote offices pull from an HTTP source that was in the office was taken out.   So are we saying I will have to do a fresh install on all these clients to get them to upgrade or can I assign a package and they will upgrade?

 

We shall be implementing it very soon...
just to be in the safe side.. did anyone had any issues during the upgrades?
thanks.

Nope - the upgrade went flawless for us

I upgraded our two SEPMs today and reenabled replication with no iseeus.  I have also upgrade two clients and will be pushing it out about 8 over the weekend before upgrading the reset sometime next (assuming no issues).  So far so good.

AHA!

@ Paul - Is this the Zero Bug build that all our brethren have been yearning for? :P

After going through the Release notes it  looks now it will be a lot stable product now and more admins will like to deploy SEP.
But just wanted to be sure if any body is still facing the issue with thew dat files in agentinfo folder even after upgrade.

@ Vikram


Cant get rid of the bug eh? ;)

Thats really a bug that has to be fixed as soon as possible otherwise the administrators wont be able to tell if the clients are updating or not.

HAHA.

Right on .....

I presume that only th MP cannot be installed over previous versions.
The complete MR4 MP2 packet should have the normal behaviour.

Is it also okay to install MR4 mp2 onto a system with have SAV 10.x installed.

Or do I have to remove this first as I'm doing today.

Tried to do it with mp1a, there was a lot of problems with the servide didn't start and no connection to SEPM.

Had to use cleanwipe and reinstall to get those clients back on track.

I had a server that could never process logs quick enough prior to the upgrade to MR4 MP2.  Now it's been working great for a few days and the dat files are not building up in the agentinfo or other log file folders.  Things still look good so far!

We had been checking first for flaws before plunging to MP4MR2...
@Vikram Kumar-SAV to SEP: Could you please elaborate the issues you had with the new release?
Many thanks.
hope to hear more of the flaws and the resolutions...
thanks all for testing guys.

Hi; Joining in discussion very late but i have a query. I am working on SEPMR4 now and while deploying i want to uninstall all previous SEP versions. Acording to this discussion MR4 doesnt upgrade MR3 MR2 or MR1. I suppose.... Is there any other way or any other utility which checks previous versions installed? I havent gone through release notes yet, but i guess SEP uninstalls symantec AVs. Any suggestions on how i should uninstall previous SEPMR applications?Can I have Product codes of all SEP apps prior to SEP MR4? If not then I will have to do a lot of scripting for which i dont have time.Please suggest

"Is it also okay to install MR4 mp2 onto a system with have SAV 10.x installed. Or do I have to remove this first as I'm doing today. Tried to do it with mp1a, there was a lot of problems with the service didn't start and no connection to SEPM. Had to use cleanwipe and reinstall to get those clients back on track."

We have had zero issues installing MR4 MP1a over the top of SAV 10.1.6.6010 on over a thousand clients using XP 32-bit. We are installing via a SMS package and not the SEPM console, if that matters.

Ray

 Am I right in understanding the following?

MR4MP2  SEPM will update SEPM MR4, MR4MP1, MR4MP1a

MR4MP2 SEP client will update any SEP 11 client via deployed builds

SO FAR SO GOOD ;-)

Upgraded from MR4MP1a it went successful. Add client package on few client groups say around 300 machines, clients got upgraded within 10 hours.

Also did fresh installation with inbuild DB and it went successful withoout any issues. Add client packages for 200 machines and completed in 7-8 hours.

Rgrds,
SAM

Good to hear that.

As per my eperiance working with MR4MP2, i also have not yet faced any issue.

Ajit

Performed the "subject" on top of MR4 MP1a (both Vista & Win 7) and the process never coughed. This package, at first peek, seems stout! I noted a faster ActiveScan than I've ever had on either Vista Ultimate SP2 RC 32 bit and Win 7 RC 32 bit.

Thanks SYMC

Can I clarify some basic points:

If we're on MR3 - I need to remove that version and install the new MR4 version - correct?

If we upgrade the server - Do we need to immediately update the clients?
I assume they won't update until we change the install package - Yes?

Is there anything of major importance in the update - compared to MR3? Assuming that the current install is stable and working as needed?

Thanks,
Paul

Here once again;

can SEPMR4 upgrade SEPMR3,SEPMR2,SEPMR1?

@RAJP

SEP will uninstall SAV automatically

 Where is that post that Paul was updating with the current version and release notes of SEP?

 Your SEPM you should upgrade 1 version after the other. But the client, you can upgrade MR1 to MR4.

In SEPM, MR4MP2 can only be installed on top of MR4 MP1a

HTH
Oliver

Hi guys,
Do you have new issues pending on MR4 mp2?
Thanks....

We are currently running MR2 MP2 and planning to upgrade to MR4 MP2. Can some one from Symantec clarify me below dobuts?

#1  Upgrade from MR2 MP2 to MR4 MP2 is not supported, I need to upgrade to MR4 first and then apply MR4 MP2. Is this correct?
#2  I can upgrade my MR2 MP2 clients directly to MR4 MP2. Am I right? Or should I uninstall MR2 MP2 and install MR4 MP2?
#3   What are the benefits am going to get from MR4 MP2 upgrade from MR2 MP2?
#4  Are there any known issues with MR4 MP2 at this point? (It seems none from this article)
#5  What are the new features going to be available in next MR that is MR5?

-Govardhan

1: Yes.
2: The documentation says to upgrade to MR4 then to MR4 MP2.  You could uninstall MR2 MP2 and install MR4 MP2.  I pushed several MR4 MP2 installations to MR3 clients with success (this is my experience only).
3: Latest updates!  Many changes to performance and other bug fixes.
4: I'm having a replication issue that is showing old client errors (anti-virus update errors, IPS update errors) that are not real.  The clients show they're up to date, but the SEPM reports problem.  This has been ongoing for me since MR2.  Other than that, I don't know of any other issues (I don't think MR4 MP2 *breaks* anything in my experience).
5: Search on MR5.  The biggest update I saw was support for Application and Device Control for 64 bit platforms.

Oh yeah, you *really* need to upgrade to the latest version with all of the bug fixes implemented.