Need Help Understanding How To Migrate From SAV 10.1.5.5000 To SEP 11.0.4202 MR4 MP2

This issue has been solved. See solution.
JasAld's picture

I've spent the last few hours reading through the installation manual and it has given me a headache... I hate to admit, I'm somewhat lost here.

Here is our environment:
*Single Windows 2003 Domain
*Single Symantec AntiVirus 10.1.5.5000 parent server.  OS = W2003 R2 SP2.  I run SAV, SSC, and SAV Central Quarantine all on this server (among other apps).
*60 Windows XP Pro (mix of SP2 & SP3) computers, on the domain, running the SAV 10.1.5.5000 client
*9 Windows 2003 R2 SP2 servers running SAV 10.1.5.5000 client.
*30 Windows XP Pro (mix of SP2 & SP3) computers, not part of the domain, but part of the TCP network (reachable by IPA).  Simple File Sharing is checked off, and once I authenticate to the machine, I can gain full administrative access via the network to the file system.
* All computers & servers on network have static IPAs, except for about 10 or so laptops.
*Eventually some Windows 2008 servers will be introduced into the network.
*ALL OSs are 32 bit; there is no 64 bit in our environment currently.

I don't need to actually "migrate" the current settings of the parent server to the new SEP.  I would be fine uninstalling the SAV components from the parent server, then install SEP "fresh" if it is less buggy to do it this way, then I'll re-adjust all the settings.  But if I SHOULD migrate, then please let me know this.

1) So should/can I install a "fresh" copy of 11.0.4202 MR4 MP2? Or do I need to install a prior version first?

2) Once SEP is on the parent server, and I have configured settings, can I push out the new clients to the domain computers & servers?  What about the non-domain computers ( I don't mind manually installing on the non-domain clients, but I would like to avoid it if possible). 

3) Will SEP 11.0.4202 automatically make exceptions for Active Directory, SQL, and Exchange?  OR do I have to manually configure these exceptions?

4) If I need to revert back to SAV 10.1.5.5000 on the parent server for some reason, eventhough I have uninstalled it already, what need I backup (before the initial removal) in order to maintain all the settings?

5) Is SEP 11.0.4202 MR4 MP2 stable?  I don't want to have to upgrade anytime soon after this....

Thank you, everyone, for any direction you can offer.  I really appreciate it.

Vikram Kumar-SAV to SEP's picture

Clarification

Solution

1) So should/can I install a "fresh" copy of 11.0.4202 MR4 MP2? Or do I need to install a prior version first?

You can directly install MR4Mp2

2) Once SEP is on the parent server, and I have configured settings, can I push out the new clients to the domain computers & servers? What about the non-domain computers ( I don't mind manually installing on the non-domain clients, but I would like to avoid it if possible).

No need to install SEP on the parent server first.In SEP everything is controlled by SEPM and not SEP.So at a time SAV server,SEPM and SSC can co-exist on the primary server.Once you have installed SEPM on the parent server start SEP deployment on all the computers.Once all your computers have been migrated to SEP then you can remove SSC and SAV and you can install theSEP client on the parent server.

3) Will SEP 11.0.4202 automatically make exceptions for Active Directory, SQL, and Exchange? OR do I have to manually configure these exceptions?

It will only make exceptions for Exchange for others you need to manually create them
For exclusion look at :

Guidelines for choosing antivirus software to run on the computers that are running SQL Server
http://support.microsoft.com/kb/309422

Antivirus exclusions that should be set on a Microsoft 2000 or 2003 domain controller
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2004063015025548

.About the automatic exclusion of files and folders for Microsoft Exchange server and Symantec products
http://service1.symantec.com/SUPPORT/ent-security....

4) If I need to revert back to SAV 10.1.5.5000 on the parent server for some reason, eventhough I have uninstalled it already, what need I backup (before the initial removal) in order to maintain all the settings?

If at all you are removing SAV from parent server take a backup of GRC. dat and PKI folder.

5) Is SEP 11.0.4202 MR4 MP2 stable? I don't want to have to upgrade anytime soon after this....

Well yes..Mr4Mp2 has been a pretty stable now.You wont have to jump to MR4Mp3 right away..so you can rest for a while after installing it.

Blenky's picture

DC

I've always been under the impression that SEP automatically makes the appropriate exceptions for Domain Controllers as well as Exchange. 

JasAld's picture

Thank you very much

Thank you very much Vikram.

We are well on our way to SEP 11.  The SEPM interface is very nice, and rolling out clients much easier than it has been in the past with SAV.

Blenky, I thought DC exceptions were handled in SAV also.  Hum....
EDIT
Yes, DCs exceptions are handled per the following:
"The latest version of the Endpoint Protection client automatically detects the presence of certain installed components/applications like Microsoft Exchange and Active Directory Domain Controllers."
From: service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/1b8ecbb6287cb982882574bb006da624