Endpoint Protection

Hello,

Got a question as I was unable to locate an answer on Google or here.

If we upgrade our primary SEPM 11.x to 12.x, would the other secondary SEPM 11 servers still be able to download the updates from it?  If there are any documentation, please feel free to forward.  Thanks in advanced...

secondary SEPM, do you mean load balancing SEPM? all the SEPM has to be on same version.

If replicating, they need to be on the same version first

Setting up sites and replication

We have 3 environments, 1 for Testing, 1 for Secondary and 1 Primary, each environment holds it's own SEPM and they're isolated from each other.  Testing SEPM is the only server allowed to obtain updates from Symantec, we configured the Seconday/Primary to download the updates from the Testing server.  So if we were to upgrade the Testing SEPM server to 12.x, would it still be possible for the other servers to download the updates from?

In that case, yes, SEPM 12.1 can provide content updates to 11.x clients. Helpful thread here:

https://www-secure.symantec.com/connect/forums/sepm-12x-managing-sep11-clients

The link that you referenced speaks of 11.x Clients.  Safe to assume that SEPM 12.1 can provide content updates to SEPM 11.x servers?

If the SEPMs are separate than they update independantly of one another. I'm not sure how a SEPM can update another SEPM. SEPM gets updates from LiveUpdate, SEPM distributes content to the clients.

Will you confirm that the clients are getting download from testing or primary/secondary server?

SEPM will update other SEPM if it is replicating, since its standalone, the SEPM either has to get the updates from LUA or Symantec LU

Testing SEPM is the only server allowed to obtain updates from Symantec, we configured the Seconday/Primary to download the updates from the Testing server.

- not sure how you achieved that - this configuration is not possible, SEPM cannot get updates from another SEPM no matter the version

"Thumbs Up" to Sebastian above.  A SEPM cannot obtain definition updates from another SEPM unless they are part of the same SEP site, or replicating partners.

Otherwise, is it possible you have the LUA installed on the testing SEPM?  If so, it goes against Symantec recommendations (http://www.symantec.com/docs/TECH105076).

Again, assuming you are using the LUA, in order for it to provide updates for SEP12.1, you will need to update it's product list and add SEP12.1 to its schedules and distribution centres:

http://www.symantec.com/docs/TECH201363

Here's what I've gathered so far....

First of all, I apologized to all as I was confused about the components that I'm inquiring about.  I was referring to Live Update Administrator and incorrectly used SEPM instead.

Primary/Secondary is utilizing LUA to pull content updates from the Live Update server in the Test environment.  LUA is not used to update clients.

Yes, it would appear Live Update Administrator and SEPM are installed on the same box.  This is how it was set up when I started here.  So my question is LiveUpdate Administrator on version 12.x backward compatible with version 11.x, where it can still push content updates to the Secondary/Primary environment.

I will read thru the Best Practices as we start our planning to Windows 2008/SEP 12.x

Hope this clears up any misunderstanding.

LU Administrator and SEPM are two different components

Yes LUadmin can update 11.x or 12.x or even Your symantec mail security 

So my question is LiveUpdate Administrator on version 12.x backward compatible with version 11.x, where it can still push content updates to the Secondary/Primary environment.

- Liveupdate Administrator does not have versions like SEP = 11.x, 12.1. Latest LUA version is 2.3.2

https://www-secure.symantec.com/connect/blogs/liveupdate-administrator-lua-version-232-now-available

...with this software you can update both 11.x and 12.1 SEP clients as well as SEPM Managers.

Some more documentation to LUA:

• LUA Installation and configuration
  https://www-secure.symantec.com/connect/articles/installation-and-configuration-lua 
• Configuring Distribution Center in LUA
  https://www-secure.symantec.com/connect/articles/configuring-distribution-center-lua
• LiveUpdate Administrator: Product Selection Guide
  https://www-secure.symantec.com/connect/articles/liveupdate-administrator-product-selection-guide
• LiveUpdate Administrator: How to configure a remote Distribution Center
  https://www-secure.symantec.com/connect/articles/liveupdate-administrator-how-configure-remote-distribution-center
• Illustrated Guide to Configuring LiveUpdate Administrator 2.x for SMSMSE 6.5.5
  https://www-secure.symantec.com/connect/articles/illustrated-guide-configuring-liveupdate-administrator-2x-smsmse-655
• Video: Install LUA (Live Update Administrator) and Configure for Symantec Endpoint Protection
  https://www-secure.symantec.com/connect/videos/install-lua-live-update-administrator-and-configure-symantec-endpoint-protection
• Video: LiveUpdate Administrator 2.3: What's New
  https://www-secure.symantec.com/connect/videos/lua-23-whats-new
• Video: LiveUpdate Administrator: How to configure a remote Distribution Center
  https://www-secure.symantec.com/connect/videos/liveupdate-administrator-how-configure-remote-distribution-center

That's cool, so your scenario is pretty much as I had guessed.

That being the case, all you really need to do is add the SEP12.1 product, to the list of items downloaded and distributed by the LUA.  It is already providing SEP11 content, you're just adding SEP12.1 to what it provides updates for.

The separation of the LUA from the SEPM is recommended, but should be considered as a separate task.

The second article I linked should guide you on how to add SEP12.1RU2 as a product for which the LUA will provide updates (when you select the SEP12.1 content in the LUA, you can clearly see whether the it's for the manager or for the clients.  Just choose the manager related content).

Thank you all for the clarification, information and links provided.  I will be sure to look them over as we plan to move forward with SEP 12.x

Hi

Can you please let me know if you do the SEPM servers are in replication or loadbalancing

Regards

Sorry for the delayed response.  The answer is "no".  Although, Replication is something worth considering if allowed by the client.