Endpoint Protection

I've been reading avidly here as prep work in case I need to update my MR2 installation with MR4 MP2 later this week.  I have a corrupted 32GB database in my MR2 installation.  Have been waiting to try to get a copy of 'ludbfix' to see if that can correct the corruption, but I'm running out of time and need to take corrective action.

My environment:  about 140 clients, distributed across about 16 physical locations, each of which is connected to me (head office) via ADSL services (typically 512/128 although some are now 1500/256 or even faster).  So bandwidth for distributing updates is an issue.  An added complication is that some of the clients are used to run photo finish software (racing industry) and if application updates arrive at the client at the wrong time, it can cause all sorts of problems.

So if I replace MR2 with MR4 MP2, I anticipate that I will need to:
-- install MR4 MP2
-- configure policies (firewall, live update, etc etc)
-- configure groups to hold clients
-- distribute new Sylink.xml file to all clients (already have rudimentary mechanism set up to achieve this)
-- when clients report in, manually move them to the appropriate groups

Is that basically the approach to take?  I was just curious to know what group the clients will be placed into automatically when they report in?

2nd question:  Most of the clients are either MR1 or MR2 version (i.e. 11.0.1000 or 11.0.2000 client software).  Only a few of them are already MR4 (11.0.4000 client software).  Will these older client versions interact happily with my new MR4 MP2 management console application?

The actual updating process for all the clients I will leave until another day if possible.  I just want to get them all reporting in and downloading updated definitions to begin with.

It will be proper if you upgrade all your MR1 & MR2 clients to MR4 and then the entire network can be migrated to MR4 MP2.

At first,  upgrade the manager to MR4 MP2.
When you migrate a server, the installation automatically detects and configures itself appropriately.
You do not need to uninstall management servers before you install the new version. The overinstall process saves legacy settings, and then upgrades to the latest version.
You need not have to configure the groups & policies again.

All the clients will report to their respective groups, by default.
Only when there is a communication failure, you need to use the Sylink.xml file.

For more information, go through the following document,
Migrating to Symantec Endpoint Protection 11.0.4202 (MR4 MP2)
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009051906042048

Regards,
Mac

I was little bit confused about upgrading butn now its very clear....

Frosty,

for your 2nd question, clients can communicate with any version of manager as long as the manger is of Endpoint Protection 11.

The reason for my upgrading is actually that the database is corrupted ... so I am concerned that if I just upgrade over the top of my existing installation, I will just end up with a corrupted MR4 MP2 installation.

However the information provided is very helpful nevertheless ... so thanks for that!

I assume you have a backup of the SEPM database. If that's the case, then all you need to do is to go to PROGRAMS > Symantec Endpoint Protection Manager > Database Back Up and Restore and select the "Restore" button.

No backup ... not via that mechanism anyway.  I have a 32GB database, but only 15GB free disk.  That's a whole other story.  I can stop the SEP services and manually backup the DB files to a USB disk, so will do that.