Endpoint Protection

My SEPM running RU4 (12.1.4013.4013) just automatically downloaded the client package version for RU6 (12.1.6168.6000) yesterday. That makes it available for distribution to clients for upgrade.

I'm thinking it is not a good idea to put the RU6 client onto machine reporting to an RU4 SEPM. Am I right, or is there something special in this release where that would actually be recommended to do?

Why did it automatically get downloaded & made available if the SEPM has not been updated yet?

Thanks

SEPM 12.1.4 can manage 12.1.6 clients so it should be fine although best practice is to be on the same versions. Is this enterprise or SBE? You may have the option checked within the LU policy to auto download new updates.

Thanks Brian,

It's Enterprise. This option is checked... but I thought this was the policy applied to clients of the SEPM (if/when the SEPM was ever updated), not to the SEPM itself to download product updates automatically from Symantec.

Is this the one that would download that client package? (LiveUpdate Settings Policy -> Windows Settings -> Advanced Settings)

Download Symantec Endpoint Protection product updates using a LiveUpdate server

Now that the new client package is there, how do I ensure that the clients do not use it & update to RU6 automatically until I tell them to (assuming I want to)? I want them to still use the RU4 client install package for now.

I presume that if all of the client packages (including the RU4 ones) have the same message on it... does that mean no auto-updates are happening at all? So that solves that for me.

Package Symantec Endpoint Protection version 12.1.6168.6000 for WIN32BIT has not been assigned to any group.

I just gotta make sure my desktop support guys still use the RU4 install package when building PC's.

 

Symantec recommends to keep SEPM and SEP clients on the same version.

Actually you should consider to upgrade the SEPM first though it can manage latets version clients of same platform.

New fixes and features in Symantec Endpoint Protection and Network Access Control 12.1.5

http://www.symantec.com/docs/TECH224706 

Symantec Endpoint Protection 12.1.6 Release Notes/What’s New

http://www.symantec.com/docs/DOC8626

Nevermind... found out another admin manually imported the new client package for MAC support.

Thanks for the info that it *can* manage the new clients, but I don't think we'll do it for anything that isn't absolutely required (best practice, and all).

If client packegs are not assigned to any group then no need to worry of that part.

Nevermind... found out another admin manually imported the new client package for MAC support.

Thanks for the info that it *can* manage the new clients, but I don't think we'll do it for anything that isn't absolutely required (best practice, and all).

Good to know. Thanks