Endpoint Protection

Hi, A client is running an older version of RU6 of SEP 11.x. Now we want to move to RU7 MP3, but is it necessary to upgrade the server or can we just deploy the new SEP RU7 MP3 package and everything will work in aspect of logging, receiving updates etc? Regards, A

Hello,

It is always recommended to upgrade the SEPM and then the SEP clients to the Latest version of SEP 11.0.RU7 MP3.

Migrating to Symantec Endpoint Protection 11.0.7300 (RU7 MP3)

http://www.symantec.com/docs/TECH199189

Latest Symantec Endpoint Protection Releases - SEP 12.1 RU2 and SEP 11.0 RU7 MP3

https://www-secure.symantec.com/connect/articles/do-not-publish-latest-symantec-endpoint-protection-releases-symantec-endpoint-protection-12

About Maintaining Consistency of Software Versions throughout a SEP 11 Organization

http://www.symantec.com/business/support/index?page=content&id=TECH131660

However, Incase you want to upgrade the SEP clients only, then you may manually import the .iso package of SEP 11.0.RU7 MP3 into the SEPM 11.0.6 and then deploy the same as per your requirements.

How to manually import client packages into Endpoint Protection Manager (SEPM)

http://www.symantec.com/docs/TECH122824

Hope that helps!!

Ok, you say "recommended". I interpret that as we can deploy the new RU7 MP3 updates to the clients and everything will work even if we do NOT upgrade the SEPM?

First of all you can upgrade your SEPM Server. After the upgradation of Server you can schedule to auto upgrade feature for upgrade the client.

Hello,

Yes, the SEP 11.0.RU7 MP3 clients would still report the older SEPM 11.0.6.

However, you would have to understand that there have been few fixes which applies to the Symantec Endpoint Protection Manager 11.0.RU7 MP3 which may not apply in your case.

Release notes for Endpoint Protection and Network Access Control 11

http://www.symantec.com/docs/TECH103087

Any particular reason for not migrating the Symantec Endpoint Protection Manager (SEPM)??

Hope that helps!!

 

With new version there is always few enhancements and product defects which are corrected. this holds same for clients as well. The manager should be capable of interpreting new logs which are sent by the clients.

Thats the reason you have to first upgrade your manager , then upgrade the clients.

instead of 11.0.7 i would suggest to upgrade to 12.1 , the latest version.

 

http://www.symantec.com/business/support/index?page=content&id=TECH163602

 

Ok, we need an urgent fix in the SEP client and the person responsible for the server is on vacation this week. Therefore we would like to deploy the new RU7 MP3 installation for the SEP client as we cannot touch the server until next week. We will deploy it using MSI deployment standalone from SEPM. As I understand this will work. The server will be upgraded to RU7 MP3 next week when that person returns from vacation.

EDIT: Double post, I changed this to the correct thread above...

Ok, we need an urgent fix in the SEP client and the person responsible for the server is on vacation this week. Therefore we would like to deploy the new RU7 MP3 installation for the SEP client as we cannot touch the server until next week. We will deploy it using MSI deployment standalone from SEPM. As I understand this will work. The server will be upgraded to RU7 MP3 next week when that person returns from vacation.

Hello,

Yes.

Secondly, you could also like to check this option which basically works for you.

Overview of Push Deployment Wizard in Symantec Endpoint Protection 12.1

https://www-secure.symantec.com/connect/articles/overview-push-deployment-wizard-symantec-endpoint-protection-121

Hope that helps!!