Endpoint Protection

Afternoon all,

We are moving from Symantec Antivirus Entreprise 10 to Symantec Endpoint Protection 11.

If we use the ClientRemote Install option from SEP11 to install on a Windows XP which already has SAV10 on it, our understanding was that the old client would be un-installed and then the new client installs.

This seems to go ahead correctly, but what we have found is that the new SEP11 installation is going into the wrong directory - instead of going into

C:\Program Files\Symantec\Symantec Endpoint Protection 

it is going into

C:\Program Files\Symantec Antivirus\

This is subsequently causing a problem with the automatic updates being rolled down from the server to the clients - some of our users are having to manually update every day.

On my laptop, I un-installed SAV10 manually and then installed SEP11 - this works fine.

Can anyone shed any light on this, or advise if using the ClientRemote installed is the correct solution to use with un-installing the old SAV10 client.

Thanks

Andy

When SEP is installed on a machine having SAV installed, it will go to C:\Program Files\Symantec Antivirus\  folder.

If it gets instaleld fine, updates should not be a problem, no matter if it is installed in Symantec Endpoint Protection folder or Symantec Antivirus folder.

When you upgrade from SAV to SEP, does the client communicate to the SEPM?

Here is an article that has troubleshooting flowchart for Liveupdate

Title: 'Symantec Endpoint Protection: LiveUpdate Troubleshooting Flowchart'
Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009082702000348?Open&seg=ent

upgrade will always go to antivirus folder
fresh install will only have endpoint protection folder
make sure that client is communicatting with the manager.
open sep client interface - help and support-troubleshooting
do u see the server name ?
if its offline ; then you need to turn off windows firewall on the client machine.
if ports are open try replacing the sylink file as per this document; once communcation is esatablished client should take udpates from the manager
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/52d862c54842f5b68825733d005ce48e?OpenDocument

The thing that is confusing us is that some of our clients are updating every day with no problems.

Those that are not updating are able to see the server, the green dot exists on the client and the server to indicate communication - but they don't update.

Is there a log held on the client that indicates what is happening with the AV defs ? Is there a log on the server ? The reports indicate that there is a problem but not why.

to know the problem, run sylink monitor on the client and post the logs.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008041812561948

Run SEP support toll and see any error is appearing? 

On how many clients do you defintions are out of date ?