Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Need some suggestions ASAP!!!!!

Created: 23 Jan 2012 | 14 comments
Outrageous's picture
0 0 Votes
Login to vote

Hello friends,

I'm faced with a situation here and need some valuable suggestions and  recommendations from you people.

The thing is I've a client for which I have to do an upgrade from SEP 11 RU5 to SEP 12.1 EE. There is a one server with an embedded database and about 300 cleints in the orgranization no replication partner is involved, failover etc just a stand alone server.

Now the process and approach which I've in my mind is as following

first I'll slop the embedded database services and take backup of the database. Then i'll simply install the SEP 12.1 Manager on the server it will automatically update.

Now when it comes to upgrading the clients what i've in my mind is i can  either do this by two ways. Either i can export the communication file of each group in the SEPM after converting it to 12.1 and then go to individually on each machine of the respective group and replace the old sylink file with the newly exported sylink file and then the clients will automatically download their respective package. The other way around is in the client's tab in SEPM i'll simply update the group with the newly upgraded availble package or i can simply use the auto upgrade feature.

But with autoupgrade and push wizard there is a bandwidth issue and how am i supposed to know that all the cients in the respective group have updated and replaced them with 12.1, there is no assurity that all the clients will update themselves through auto upgrade or Push.

I hope you guys have understood my problem. It'll be great if u provide me with ur Suggestions, Recommendations and the right way to do this. Thanks in advance. Waiting for ur Replies

Regards,
 

Comments

Mithun Sanghavi's picture
23
Jan
2012
2 Votes +2
Login to vote

Understanding.

Hello,

Your Understanding on Migrating is completely correct.

However, it is also important you to understand that SEP 11 and SEP 12.1 are 2 different products.

and there are lots of different features which have been added to 12.1 clients

So, SEPM 11 would not be able to update SEP 12.1 clients due to product change.

I would request you to plan Migration properly and go with the Second idea of your's.

i.e; Migrate SEPM and then the clients via AutoUpgrade.

Again, to understand if the SEP clients have been upgraded is very easy.

In the SEPM, change the Clients TAB view to "Client Status", shown below:

 

Planning for Migration to Symantec Endpoint Protection Manager 12.1

http://www.symantec.com/docs/TECH162730

Steps to prepare computers to install Symantec Endpoint Protection 12.1 client

http://www.symantec.com/docs/TECH163112

Upgrading or migrating to Symantec Endpoint Protection 12.1

 
Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

oykunsatis's picture
23
Jan
2012
0 Votes 0
Login to vote

Hello, You don't need to

Hello,

You don't need to spesific process for upgrading,most of times i don't backup DB also. 

Just start the Setup of 12.1 and follow the screen procedures. This is the easiest upgrade. Because of Embedded DB schema upgrade it'll take much time in the upgrade wizard when your DB Schema being update due to your DB size.

For updating clients, if all clients are in LAN add 12.1 package to top of the group. Else use Push Deployment Wizard.

 

Regards,

Oykun

SMLatCST's picture
23
Jan
2012
1 Vote +1
Login to vote

Thumbs up to the above

Mithun's lnks and info should set you on your way.

Just as an addendum, I think it's worth pointing out the below:

As you are looking to perform an in-place upgrade, there is no need to play around with any sylink files.  Once the in-place upgrade of your SEPM is complete, the SEP11 clients will start talking to the v12.1 SEPM without issue.  Exporting another sylink file and pushing it out to the SEP11 clients serves no purpose.

Once the upgrade is complete and you can see all your SEP11 clients checking into the SEPM, you can start looking at the client upgrade options.  I'd personally go for the auto-upgrade feature which you already seem familiar with.

When using this feature, it is always recommended to only enable it for a group at a time, and to disable the upgrade when all the clients in a group have upgraded (presumably you don't have all 300 clients in a single group!).  Soooo, pick a group, upgrade, check they have upgraded, disable upgrade, and move onto the next group.

Don't forget that you can always schedule the upgrade for specific time windows, as well as spread them across several days if you're really concerned about the load this will place on your network or SEPM.

Finally, as Mithun has mentioned, SEP12.1 adds handy options for checking on the status of client upgrades.  In addition to the 'Client Status' view which shows the current client version, you can double-click on any client to see its deployment status.  The Deployment status is shown when you open a clien't properties in a few fields at the bottom of the 'General' tab, and will show you at what stage of the upgrade the client is in, as well as details on what versions of SEP it is moving to and from, plus when it was last upgraded (as below):

 

Chetan Savade's picture
23
Jan
2012
1 Vote +1
Login to vote

Hi Outrageous,

I would like to ask question ?

Your clients are residing on same LAN ? If yes...bandwidth should not be a concern.SEPM won't push upgrade package to all the clients at the same time. However you can schedule your upgrade as per your non production hours.

Check following article

https://www-secure.symantec.com/connect/articles/sepm-121-auto-upgrade

I would like to clear your doubt also, as you said --> Either i can export the communication file of each group in the SEPM after converting it to 12.1 and then go to individually on each machine of the respective group and replace the old sylink file with the newly exported sylink file and then the clients will automatically download their respective package. 

Ans : No manual work is required, we have Sylink replacer utility, it will replace sylink.xml file on all the clients. However I would also suggest to go with Auto upgrade.

To know how upgrade will work, check this article

https://www-secure.symantec.com/connect/articles/sep-11x-sep-121-upgrade-process-graphical-overview

Also, only database backup is not mandatory, follow this article prior to upgrade.

http://www.symantec.com/docs/TECH102333 

I hope it will help you !!!

Thanks and Regards, 

Chetan Savade

Technical Support Analyst,

End Point Security, Enterprise Technical Support

Outrageous's picture
23
Jan
2012
0 Votes 0
Login to vote

Thank you every one for

Thank you every one for replying and making it clear, appreciate it

Outrageous's picture
23
Jan
2012
0 Votes 0
Login to vote

Kindly tell me one more thing

Kindly tell me one more thing that let's say i've a group in which there are about 40 clients and I go for an autoupgrade the group with the 12.1 package then isn't going to be a network congestion in that Case?

Mithun Sanghavi's picture
23
Jan
2012
1 Vote +1
Login to vote

No Congestion

Hello,

There is no Congestion.

It is incremental and by default only 10 packages are distributed at a time.

Again, there is nothing to worry.

We have seen flawless distribution.

Again, incase you feel, then you could configure Auto Upgrade Schedule if desired as well.

Again, check this:

Upgrading clients by using AutoUpgrade

http://www.symantec.com/docs/TECH96789

How to temporarily stop AutoUpgrade from continuing

http://www.symantec.com/docs/TECH97038

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

Outrageous's picture
24
Jan
2012
0 Votes 0
Login to vote

@Mithun thanks...but do u

@Mithun thanks...but do u mean that once i select the autoupgrade then initially 10 machines will update themselves and once the autoupgrade is completed the next 10 machines will upgrade and this process will keep on repeating untill all the machines in a group are upgraded...Is this how it works?

What i've understood is this 10 packages can be distributed once...once this process is complete then again 10 packages will be distributed and this process will keep on happening untill all the machines in a group are completed..Have I understood it right?

Mithun Sanghavi's picture
24
Jan
2012
0 Votes 0
Login to vote

Correct

Hello,

What you have understood is correct.

Once the 10 packages have been distributed, then the process of distributing to others starts.

1 -10 packages, then 11, 12, 13, 14, and so on...

So the first time...10 packages at a time would be deployed and later as and when - out of 10 completes next starts...

Hope that explains..

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

pete_4u2002's picture
23
Jan
2012
0 Votes 0
Login to vote

usually it is incremental

usually it is incremental hence less in size.

Symantec World's picture
24
Jan
2012
0 Votes 0
Login to vote

Re

Hi Pete,

 

I think it wont be incremental upgradation as the product changed from 11.x to 12.1. But as per your article (https://www-secure.symantec.com/connect/articles/e...) which is approx 52 MB size and the same can be schedule for auto upgrade.

Regards, M.R

pete_4u2002's picture
24
Jan
2012
0 Votes 0
Login to vote

it's the size after exporting

it's the size after exporting package . While autoupgrade in some scenrio it is full otherwise it is delta. Tested and came around 43 MB of package.

Outrageous's picture
24
Jan
2012
0 Votes 0
Login to vote

@pete.....u mean that each

@pete.....u mean that each machine will get an package of upgradation whom size will be 43 MB? or the total size of autoupgrade on all the machines in a particular group will be of 43 MB?

Please enlighten me on it a bit.

pete_4u2002's picture
24
Jan
2012
0 Votes 0
Login to vote

each client will be around 43

each client will be around 43 MB, i did test from Ru 7 to SEP 12.1. You can test it on client machine, enable sylink logging, once upgrade pass on the sylink log. I can tell you the size of the client package.