Endpoint Protection

 View Only
Expand all | Collapse all

Multiple SEPM?

  • 1.  Multiple SEPM?

    Posted May 04, 2013 09:00 PM

    I'm currently having a Windows 2008 server 11.0.7 SEPM, managing around 50 SEP 11.0.7 and 11.0.6 clients. 

    Because of the instability of both my production server and SEPM, I am planning to have install another SEPM 12 on a less critical machine, possibly a Windows 7 client or another Windows 2008 server. Is this advisable to run multiple SEPMs?



  • 2.  RE: Multiple SEPM?

    Posted May 04, 2013 09:13 PM

    You don't need to do this for such a small site.

    It might be easiest if you install the new SEPM and than point the clients to the new SEPM.

    You can point the clients to the new SEPM using the Communication Update Package Deplyoment option

    Restoring client-server communications with Communication Update Package Deployment

    Article:HOWTO81109  |  Created: 2012-10-24  |  Updated: 2013-01-30  |  Article URL http://www.symantec.com/docs/HOWTO81109

     



  • 3.  RE: Multiple SEPM?

    Posted May 05, 2013 02:09 AM

    hello,

    you can upgrade your sepm 11.0.7 to sepm 12.1.2

    Supported upgrade paths to Symantec Endpoint Protection 12.1.2

     

    Article:TECH198599 | Created: 2012-10-18 | Updated: 2012-11-06 | Article URL http://www.symantec.com/docs/TECH198599

     

    Upgrading or migrating to Symantec Endpoint Protection 12.1.2 (RU2)

     

    Article:TECH197426 | Created: 2012-09-27 | Updated: 2013-01-14 | Article URL http://www.symantec.com/docs/TECH197426

    Best practices for upgrading to Symantec Endpoint Protection 12.1.2

     

    Article:TECH163700 | Created: 2011-06-30 | Updated: 2013-01-02 | Article URL http://www.symantec.com/docs/TECH163700

     



  • 4.  RE: Multiple SEPM?

    Posted May 05, 2013 04:47 AM

    No, my advise is that you not required to install new one. You have only 50 systems so you can upgrade 11.x version in 12.1 ru2 mp1 and use the 12.1 features.

    https://www-secure.symantec.com/connect/forums/117-mp1-121-ru2

    Latest Symantec Endpoint Protection Released - SEP 12.1 RU2 MP1

    http://www.symantec.com/connect/blogs/latest-symantec-endpoint-protection-released-sep-121-ru2-mp1



  • 5.  RE: Multiple SEPM?

    Posted May 05, 2013 05:09 AM

    yes I agree above comments you can upgrade your sepm version.you don't need to install new server.



  • 6.  RE: Multiple SEPM?

    Posted May 05, 2013 11:36 AM

    thanks for all the advice.

    the reason why i am planning for a new machine is because I am sensing some unstability on my current server. there are also occasions where SEPM simply freeze on me for no reason and it cannot be resolve till I restart the machine. since it is a production server, I can't really just restart anytime i like to. 

    in fact, i tot of simply uninstall SEPM from my current server and install SEPM 12 on my Windows 7 client machine. 



  • 7.  RE: Multiple SEPM?

    Posted May 05, 2013 11:46 AM

    This KB article may be helpful then:

    How to move Symantec Endpoint Protection Manager 12.1 from one machine to another

    Article:TECH171767  |  Created: 2011-10-13  |  Updated: 2012-07-10  |  Article URL http://www.symantec.com/docs/TECH171767

     



  • 8.  RE: Multiple SEPM?

    Posted May 05, 2013 02:10 PM

    How many overall client in your network which you manage by current server?

    is it more than 50 ?

    if it is 50 then simply setup the new server with 12.1 ru2 mp1.

    then deploy the client easily because of low count.

     

    above comments link can assist you to upgrade.

     

    when your new server can be ready then disconnect the old one.



  • 9.  RE: Multiple SEPM?

    Posted May 05, 2013 09:23 PM

    Yes, you can actually do that. Since SEPM 12 can managed previous version of SEP including your 11 versions. Then, you can upgrade your clients or leave your other clients to be managed in that version, but most advisable is to upgrade your SEP client to Latest version.

     

    Regards,

    JM



  • 10.  RE: Multiple SEPM?

    Posted May 05, 2013 11:24 PM

    hello,

    look this one of artical

    How to move SEPM from one server to another server

    https://www-secure.symantec.com/connect/articles/hot-move-sepm-one-server-another-server

     

    SEP 11

    How to move Symantec Endpoint Protection Manager from one machine to another

    http://www.symantec.com/docs/TECH104389

    SEP 12.1

    How to move Symantec Endpoint Protection Manager 12.1 from one machine to another

    http://www.symantec.com/docs/TECH171767



  • 11.  RE: Multiple SEPM?

    Posted May 06, 2013 12:04 AM

    Setup the new Server with SEPM 12.1 RU2 and then migrate all the clients in latest.

    If you not want to migrate the client on same time, replace the sylink file for client/server communication.

    You can migrate the client at any of time.



  • 12.  RE: Multiple SEPM?

    Broadcom Employee
    Posted May 06, 2013 12:40 PM

    Hi,

    It's not advisable to managed two SEPM's for 50 clients.

    You can recover the SEPM within an hour for the network of 50 clients if necessary backups are in place smiley

    I would also suggest to install SEPM 12.1 RU2 version on the new machine.

    Point all the existing clients to the new SEPM.

    Take the help of following article to do that.

    SEP 12.1 RU2 and Reset Client Communication

    https://www-secure.symantec.com/connect/articles/sep-121-ru2-and-reset-client-communication

     



  • 13.  RE: Multiple SEPM?
    Best Answer

    Trusted Advisor
    Posted May 06, 2013 01:53 PM

    Hello,

    I would not advise you installing multiple SEPM's for a 50 client machine environment.

    In your case, you would be migrating the server OS as well as SEP 11.x to SEP 12.1.

    Check these Threads which speaks on the same issue - 

    https://www-secure.symantec.com/connect/forums/symantec-1106-121-migration-question

    https://www-secure.symantec.com/connect/forums/migrating-sep-11-old-hardware-sep-12-new-server-hyper-v-vm

    In your case - there are 2 scenarios - 

    1. Upgrade the SEPM 11.x on the existing 2k8 32 bit server to SEP 12.1, then move the installation to the new 2k8 64 bit server by performing a disaster recovery.

    How to move Symantec Endpoint Protection Manager 12.1 from one machine to another

    http://www.symantec.com/docs/TECH171767

    Symantec Endpoint Protection 12.1: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

    http://www.symantec.com/business/support/index?page=content&id=TECH160736

    OR

    2. Move the installation of SEPM 11.x from the existing 2k8 32 bit server to the new 2k8 64 bit server, then upgrade it to SEP 12.1 after it's moved.

    How to move Symantec Endpoint Protection Manager from one machine to another

    http://www.symantec.com/docs/TECH104389

    How to point clients to a new SEPM after decommissioning or replacing the primary SEPM.

    http://www.symantec.com/docs/TECH92556

     

    Migrating from Symantec Endpoint Protection v.11.x clients to Install Symantec Endpoint Protection v.12.1. could migrate flawlessly without any issues.

    It is always recommended to perform a Disaster Recovery for SEPM 11.x before Migrating to SEP 12.1 as a Backup step.

    Here are the Best Practices for Upgrading to SEP 12.1 RU2 - 

    Best practices for upgrading to Symantec Endpoint Protection 12.1.2

    http://www.symantec.com/docs/TECH163700

     

    Also, check the Articles for the Migration on :

    Quick Access to Symantec Knowledgebase Articles of Symantec Endpoint Protection 12.1

    https://www-secure.symantec.com/connect/articles/quick-access-symantec-knowledgebase-articles-symantec-endpoint-protection-121

    SEP 11.x to SEP 12.1 Upgrade process graphical overview

    https://www-secure.symantec.com/connect/articles/sep-11x-sep-121-upgrade-process-graphical-overview

    WhitePaper for Migration: https://www-secure.symantec.com/connect/downloads/migration-whitepaper-symantec-endpoint-protection-version-121

    Hope that helps!!



  • 14.  RE: Multiple SEPM?

    Posted May 08, 2013 05:01 AM

    Thanks everyone. Looks like setting up a new SEPM altogether is a recommended choice.

    Can I know if anyone has setup SEPM 12 on a Windows 7 Professional Environment before? Will there be performance issues & slow down the PC tremendously?



  • 15.  RE: Multiple SEPM?

    Trusted Advisor
    Posted May 08, 2013 07:35 AM

    Hello,

    SEPM 12.1 can be installed on a Windows 7 Professional Environment.

    In your case, where you are using only 50 clients, I don't think there would be a performance issue.

    However, you may like to Disable the Windows Defender and UAC. Make sure proper exceptions are created in the Windows Firewall (if enabled)

    Also, try keep the Communication settings to Pull Mode and HeartBeat Interval of at least 30 minutes.

    Hope that helps!!



  • 16.  RE: Multiple SEPM?

    Broadcom Employee
    Posted May 27, 2013 12:21 PM

    Hi,

    Previously it was not possible to install SEPM on Windows 7 machine. From SEP 12.1 it's possible to install on Windows 7 machine as well.

    In our lab environment we have tested and don't see any performance issue.

    Even though machines slow down it has nothing to do with SEPM installed OS. Everything depends upon the configuration smiley.

    Always follow the best practice to improve the overall performance.

    Best Practice helpfule articles: https://www-secure.symantec.com/connect/articles/sep-121-best-practice-articles