Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Multiple SEPM?

Created: 04 May 2013 • Updated: 08 May 2013 | 15 comments
This issue has been solved. See solution.

I'm currently having a Windows 2008 server 11.0.7 SEPM, managing around 50 SEP 11.0.7 and 11.0.6 clients. 

Because of the instability of both my production server and SEPM, I am planning to have install another SEPM 12 on a less critical machine, possibly a Windows 7 client or another Windows 2008 server. Is this advisable to run multiple SEPMs?

Operating Systems:

Comments 15 CommentsJump to latest comment

.Brian's picture

You don't need to do this for such a small site.

It might be easiest if you install the new SEPM and than point the clients to the new SEPM.

You can point the clients to the new SEPM using the Communication Update Package Deplyoment option

Restoring client-server communications with Communication Update Package Deployment

Article:HOWTO81109  |  Created: 2012-10-24  |  Updated: 2013-01-30  |  Article URL http://www.symantec.com/docs/HOWTO81109

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

W007's picture

hello,

you can upgrade your sepm 11.0.7 to sepm 12.1.2

Supported upgrade paths to Symantec Endpoint Protection 12.1.2

Article:TECH198599 | Created: 2012-10-18 | Updated: 2012-11-06 | Article URL http://www.symantec.com/docs/TECH198599

Upgrading or migrating to Symantec Endpoint Protection 12.1.2 (RU2)

Article:TECH197426 | Created: 2012-09-27 | Updated: 2013-01-14 | Article URL http://www.symantec.com/docs/TECH197426

Best practices for upgrading to Symantec Endpoint Protection 12.1.2

Article:TECH163700 | Created: 2011-06-30 | Updated: 2013-01-02 | Article URL http://www.symantec.com/docs/TECH163700

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

technical_specialist's picture

No, my advise is that you not required to install new one. You have only 50 systems so you can upgrade 11.x version in 12.1 ru2 mp1 and use the 12.1 features.

https://www-secure.symantec.com/connect/forums/117-mp1-121-ru2

Latest Symantec Endpoint Protection Released - SEP 12.1 RU2 MP1

http://www.symantec.com/connect/blogs/latest-symantec-endpoint-protection-released-sep-121-ru2-mp1

K33's picture

yes I agree above comments you can upgrade your sepm version.you don't need to install new server.

ninpeh's picture

thanks for all the advice.

the reason why i am planning for a new machine is because I am sensing some unstability on my current server. there are also occasions where SEPM simply freeze on me for no reason and it cannot be resolve till I restart the machine. since it is a production server, I can't really just restart anytime i like to. 

in fact, i tot of simply uninstall SEPM from my current server and install SEPM 12 on my Windows 7 client machine. 

.Brian's picture

This KB article may be helpful then:

How to move Symantec Endpoint Protection Manager 12.1 from one machine to another

Article:TECH171767  |  Created: 2011-10-13  |  Updated: 2012-07-10  |  Article URL http://www.symantec.com/docs/TECH171767

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Ch@gGynelL_12's picture

Yes, you can actually do that. Since SEPM 12 can managed previous version of SEP including your 11 versions. Then, you can upgrade your clients or leave your other clients to be managed in that version, but most advisable is to upgrade your SEP client to Latest version.

Regards,

JM

Mithun Sanghavi's picture

Hello,

I would not advise you installing multiple SEPM's for a 50 client machine environment.

In your case, you would be migrating the server OS as well as SEP 11.x to SEP 12.1.

Check these Threads which speaks on the same issue - 

https://www-secure.symantec.com/connect/forums/symantec-1106-121-migration-question

https://www-secure.symantec.com/connect/forums/migrating-sep-11-old-hardware-sep-12-new-server-hyper-v-vm

In your case - there are 2 scenarios - 

1. Upgrade the SEPM 11.x on the existing 2k8 32 bit server to SEP 12.1, then move the installation to the new 2k8 64 bit server by performing a disaster recovery.

How to move Symantec Endpoint Protection Manager 12.1 from one machine to another

http://www.symantec.com/docs/TECH171767

Symantec Endpoint Protection 12.1: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?page=content&id=TECH160736

OR

2. Move the installation of SEPM 11.x from the existing 2k8 32 bit server to the new 2k8 64 bit server, then upgrade it to SEP 12.1 after it's moved.

How to move Symantec Endpoint Protection Manager from one machine to another

http://www.symantec.com/docs/TECH104389

How to point clients to a new SEPM after decommissioning or replacing the primary SEPM.

http://www.symantec.com/docs/TECH92556

Migrating from Symantec Endpoint Protection v.11.x clients to Install Symantec Endpoint Protection v.12.1. could migrate flawlessly without any issues.

It is always recommended to perform a Disaster Recovery for SEPM 11.x before Migrating to SEP 12.1 as a Backup step.

Here are the Best Practices for Upgrading to SEP 12.1 RU2 - 

Best practices for upgrading to Symantec Endpoint Protection 12.1.2

http://www.symantec.com/docs/TECH163700

Also, check the Articles for the Migration on :

Quick Access to Symantec Knowledgebase Articles of Symantec Endpoint Protection 12.1

https://www-secure.symantec.com/connect/articles/quick-access-symantec-knowledgebase-articles-symantec-endpoint-protection-121

SEP 11.x to SEP 12.1 Upgrade process graphical overview

https://www-secure.symantec.com/connect/articles/sep-11x-sep-121-upgrade-process-graphical-overview

WhitePaper for Migration: https://www-secure.symantec.com/connect/downloads/migration-whitepaper-symantec-endpoint-protection-version-121

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SOLUTION
consoleadmin's picture

How many overall client in your network which you manage by current server?

is it more than 50 ?

if it is 50 then simply setup the new server with 12.1 ru2 mp1.

then deploy the client easily because of low count.

above comments link can assist you to upgrade.

when your new server can be ready then disconnect the old one.

Thanks.

W007's picture

hello,

look this one of artical

How to move SEPM from one server to another server

https://www-secure.symantec.com/connect/articles/h...

SEP 11

How to move Symantec Endpoint Protection Manager from one machine to another

http://www.symantec.com/docs/TECH104389

SEP 12.1

How to move Symantec Endpoint Protection Manager 12.1 from one machine to another

http://www.symantec.com/docs/TECH171767

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

akgs's picture

Setup the new Server with SEPM 12.1 RU2 and then migrate all the clients in latest.

If you not want to migrate the client on same time, replace the sylink file for client/server communication.

You can migrate the client at any of time.

Chetan Savade's picture

Hi,

It's not advisable to managed two SEPM's for 50 clients.

You can recover the SEPM within an hour for the network of 50 clients if necessary backups are in place smiley

I would also suggest to install SEPM 12.1 RU2 version on the new machine.

Point all the existing clients to the new SEPM.

Take the help of following article to do that.

SEP 12.1 RU2 and Reset Client Communication

https://www-secure.symantec.com/connect/articles/s...

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

ninpeh's picture

Thanks everyone. Looks like setting up a new SEPM altogether is a recommended choice.

Can I know if anyone has setup SEPM 12 on a Windows 7 Professional Environment before? Will there be performance issues & slow down the PC tremendously?

Mithun Sanghavi's picture

Hello,

SEPM 12.1 can be installed on a Windows 7 Professional Environment.

In your case, where you are using only 50 clients, I don't think there would be a performance issue.

However, you may like to Disable the Windows Defender and UAC. Make sure proper exceptions are created in the Windows Firewall (if enabled)

Also, try keep the Communication settings to Pull Mode and HeartBeat Interval of at least 30 minutes.

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Chetan Savade's picture

Hi,

Previously it was not possible to install SEPM on Windows 7 machine. From SEP 12.1 it's possible to install on Windows 7 machine as well.

In our lab environment we have tested and don't see any performance issue.

Even though machines slow down it has nothing to do with SEPM installed OS. Everything depends upon the configuration smiley.

Always follow the best practice to improve the overall performance.

Best Practice helpfule articles: https://www-secure.symantec.com/connect/articles/sep-121-best-practice-articles

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<