Endpoint Protection

Hello,

I am new to SEP (currently company is using SSC 10) and need to ask a question.  According to symantec when you tie an OU from ad with SEP the clients are supposed to be upgraded if old version.  Now if the clients don't have SEP installed but exist in that particular OU, will SEP automatically detect it and install the latest version of the client?  If yes, is it a setting/configuration?

Thanks,

Kay

As long as it's connected to the domain, you will be able to deploy.

OK, great!  Now my question is, do you have to configure it in the console or will SEP detect it automatically?  Sorry but new to SEP.

Read the manual, all  of this is in there.  it is truely a great help.

On the group in SEPM, you have to apply the latest package in the "Install Packages" tab.   Once you add a package, open the package and at the bottom there is an upgrade schedule option, use that or leave it blank to push the update all at once.

 It wont detect automatically but has to be pushed out for the selected group of machines

Just so I'm understanding this.  If i import an OU into SEP with 20 machines, when I push out an install package to that OU all those 20 machinies should get the install, correct?  Also, does it work the same way when trying to upgragde the SEP clietn?

Just so I'm understanding this.  If i import an OU into SEP with 20 machines, when I push out an install package to that OU all those 20 machinies should get the install, correct?  Also, does it work the same way when trying to upgragde the SEP client?

Yes, but if you want to upgrade sep client, I think it's better if you create a new package then deploy. Btw what's your old/current AV client software?

Right now working on SEP 11.0.4.  What I've read from the manual in order to detect any machines that don't have the client installed the best solution is to do a search of unmanaged machines and then select them and run the install.  Is that pretty much the basic solution, or is there something more specific?

Your best option is to run the Migration and Deployment Wizard, it will poll the SSC server and pull in your existing policies and help you to upgrade any or all of your existing SAV clients.   

Otherwise, detecting machines that are running older versions of SAV doesn't always work, you're best off using the Unmanaged Machines search, then deploy to the client PCs using that.  The SEP client package will automatically detect SAV and upgrade it accordingly.

This post may also help:
http://www.symantec.com/connect/forums/sep-upgrade-questions