Endpoint Protection

I just wanted to check on a couple things before install this

1)  Has anyone had any serious problems with this MP ??

2)  Do you have to install MP1 and MP1A,   In order to install MP2 ??

3)  Approx. how long does the update take to install and is there a User/Installation
manual for MP2 ??  I looked when I download the files for MP2, but I did not see one,
is it perhaps in the ZIP file for CD1 - - I have not unzipped them yet

4)  Do we see an NEW MP's coming out in the the near future

Mike

1. Mr4Mp2 is pretty stable and there is no mjor issue reported yet

2.You have to upgrade to MR4 then directly MR4MP2

3 To upgrade the Manager it takes about 20-30 Minutes
If you are using auto-upgrade feature to upgrade the clients it depends on number of clients you have and the network speed.Then WAN side considerations..
Still it should not take more than an hour or two for the local clients to upgrade.
In CD1 you have Documentation folder where you will find the Manual

Here is the  Doc. on how to Migrate to MR4 to MP2
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009051906042048

4.I dont think the next patch will be released in atleast 2 months.But new patches will never stop coming.For new features and for bug fixes patches have to be upto date.

I think vikram has answered the same.

Look for the next release (MR5), to be out mid September.

We have over 2000 MR3 clients deployed across 19 different physical localtions, all of which are connected with 1.544Mbps frame relay.  As you can imagine, simply assigning the MR4 MP2 installation package to groups won't be a good idea for us, unless we want to bring our network to a grinding halt.  To get around this with MR3, we created a separate GPO and configure software installation settings for each physical site, directing clients in that site to local share where the msi installation package resides.  We used NTFS security filtering on the policies and then added machines to the NTFS groups in batches to control the deployment flow.

Now that we have fully deployed MR3, we need an upgrade plan for these 2000+ clients to MR4 MP2.  I've tested adding a second package to the same software installation settings in the existing policies, flagging the new package (MR4MP2) as an upgrade for the old package (MR3).  On a couple of clients, this seemed to work very well, but I've been advised by Symantec NOT to upgrade directly from MR3 to MR4MP2, and instead to go from MR3-->MR4-->MR4MP2.  As you can imagine, this would cause quite a bit of overhead across the enterprise, not to mention all the workstation reboots.

Has anyone else had experience upgrading pre-MR4 clients to MR4MP2 via GPO?

Thanks.

oh .. if MR5 is due on September... we had not yet upgrade to MR4MP2...
would there be somethings that we would missed if we opted to go straight to MR5?
thanks...

Nothing will be missed New Releases carry the fixes of previous releases.
Eg
If bug 1 is fixed in MR1
then MR1 MP1 will have 1 and 2
MR2 will have 123
So on

If you open up a release notes document, you will find the list of all the fixes from the previous versions:

Release notes for Symantec Endpoint Protection 11.0.x and Symantec Network Access Control 11.0.x

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/2c62c4ee0e697aae882573b000034ded?OpenDocument

Aniket

1. If any serious issue, symantec won't let it ship. And MP2 fixed some issue in MR4 and MR4MP1.
2. NO.
3. It's very easy to Upgrade to MP2 from old SEP version
- For SEPM, you just run setup.exe. Only one thing you should care is to delete all the replication partner and upgrade each site sperately and re-add the replication partner after all the sites have upgrade to MR4MP2.
4. There will be MR5, but it will come in a half year. We'd better suggest you to upgrade to MR4MP2 first.

You can find how to upgrade in the Administration_Guide.pgf under CD1/Document folder.

Migrating to Symantec Endpoint Protection 11.0.4202 (MR4 MP2)

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009051906042048 

Thanks for all the responses and help with my questions - - it helped a lot

Reading the documentation now and will work on doing this within the next month or
so ....

Thanks again for the advice

@Adminnnnnn: I scratched my head over that requirement, too. But the trick is that you can also install MR4 MP2 to a machine that has no SEP installed, so do this--

1. Leave the MR3 package in the GPO indefinitely, or at least until you are sure you have no MR3 clients, even those offline. (Actually, that's a pretty good practice in general)
2. Add the MR4 MP2 package to the GPO. But on the Upgrades tab, click Add and select MR3 as a Replace install. That will uninstall MR3, reboot, then install MR4 MP2, giving you a supported install.

Caution: If you use OU Groups in SEPM, uninstalling may trigger the duplicate clients bug, about which there are other threads here, and a README paragraph describing a workaround available for it that's new to MR4 MP2. If you don't use OU Groups, I don't think you'll have a problem.

Going forward, if there is an MR4 MP3 or MR4 MP4, you can make those Upgrade installs over MR4 MP*, and Replace installs over MR3.

I'm assuming you're going to use the same GPO for MR4 MP2. If you use a different GPO for whatever reason, you can also browse other GPOs from the Upgrade dialog box to pick the Packages that the new MR4 MP2 Package will Replace (or Upgrade).

If you do this, make sure EVERY future package you add to the GPO has an Upgrade or Replace setting for EVERY previous package in the GPO, or you will add bogus entries to the managed install section of the registry that are a nuisance to get rid of.