Endpoint Protection

The SEP RU6 MP1 release notes state the following:

Symantec Endpoint Protection RU6 MP1 (11.0.6100) [...] cannot be installed over any versions of Symantec Endpoint Protection or Symantec Endpoint Protection Manager prior to RU6. It must be installed over RU6 or RU6a.

I understand that to upgrade the SEPM servers from RU5, I'll first upgrade to RU6a and then update that to RU6 MP1.

However, what about clients? We have clients running both MP4 and RU5. Do they have to upgrade to RU6 first and then RU6 MP1 as well?

So the Clients can be updated directly to RU6 MP1 from (MR4MP2..etc..) but not the SEPM?
Or will I need to have the previous installation packages (RU6/6a) available on my server so that the appropriate delta's can be applied.

Just looking for verification like the op since the release notes specifically state:
" This maintenance patch cannot be installed over any versions of Symantec Endpoint Protection or Symantec Endpoint Protection Manager prior to RU6"

thanks

So the Clients can be updated directly to RU6 MP1 from (MR4MP2..etc..) but not the SEPM?  No they have to be upgraded to RU6 

RU6MP1 is a Maintenance  patch and not a maintenance release, A MP can only be installed on the main build. You can install RU6 over RTM or MR3 or MR4MP2 but not RU6MP1. For that you need to have RU6

 It is not recommend to upgrade directly from RU5 or MR4  to RU6MP1

This migration path is not supported.

Possible effects after a direct upgrade to RU6MP1  from a lower version [except RU6]:
Schema Corruption.
Possible dll corruption.
Policies Corruption.
Network breakdown.
Challenges with uninstalling SEP.


So what you need  Upgrade the clients to RU6 and then upgrade  to RU6MP1.

Yes scott you are correct  a MP can only be installed over the MR or RU for which it has been released

Symantec Endpoint Protection RU6 MP1 (11.0.6100) provides fixes since the release of RU6 and RU6a. This maintenance patch cannot be installed over any versions of Symantec Endpoint Protection or Symantec Endpoint Protection Manager prior to RU6. It must be installed over RU6 or RU6a.

Prachand and Sandip_Sali have given different answers. Which is it?

Bah just read in the release notes:

If you add Release Update 6 client packages to a Symantec Endpoint Protection Manager that runs Maintenance Release 1 or earlier (prior to upgrading to RU5), the auto-upgrade fails for clients that run Maintenance Release 1 or earlier.

To resolve this issue, upgrade the Symantec Endpoint Protection Manager to Release Update 6 before you import or try to deploy Release Update 6 client packages by using auto-upgrade.

I like how tech support gives two different answers here. One is telling people they have to upgrade to RU6 before they install RU6 MP1, the other is telling people that is a lie and you only have to worry about that for the server and that clients can do from any version to RU6 MP1.

Edit: this is wrong ... see release notes!  Sorry

Just import the *.info files for the ru6mp1 client to the older SEPm: (mp4/ru5)
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010012908525148

Then you can upgrade them directly from (I think) any SEP11 version all the way back to the initial release.

Hope that helps

I am sorry Prachand is right.

Dan, Prachand is right. I had misread the thread for SEPM only. Apologies for the same.

Hello everybody!

How can I download this SEP update? I have got SEP 11.0 RU6a.

Hi.

Will there be any problems to have SEP RU6 MP1 clients under a RU5 SEPM?
My SLA stops me from upgrading the SEPM Servers before approvel (this can take some time), but I can upgrade  the clients immediately.
Can this be done safely?

I don't think, therr should be any issues with ru6mp1 clients and old version of  sepm.

Appl & Div control policy still not fictionally for 64bit OS.

Ok, so I'm confused.

My SEPM is at RU6a, my clients range from RU6a to 11.0.4

Obviously I can upgrade the SEPM to RU6 MR1 but can I upgrade clients from 11.0.4, 11.0.5 to RU6 MR1 or do I need to upgrade them to RU6a first then RU6 MR1?

You would need to upgrade all the  clients to ru6a version first.

What was the thought process on that? I have 10k clients and things don't exactly move that fast around here. I won't have them upgraded to RU6a probably for another year and a half.

You CAN have ru6mp1 sepm, and  clients with  old  versions. If you do not wish to upgrade   the  clients to ru6 mp1 , you can have them on  old  versions. They would still be managed by ru6mp1 sepm.
I hope it is  clear  now...

It is now, thanks.

I plan to upgrade, just harder to do when I have to go from 11.0.x to RU6a then RU6 MP1, but I'll get there eventually.

For groups that contain RU 5 clients, can you add install packages for both RU6a and RU6a MP1?  This would be based on the hopes that the client is smart enough to upgrade to RU6a first, then upgrade to RU6a MP1.  

Or could this cause undesirable results?

The upgrade   may  fail, if you  add both the packages, at once. First  add Ru6a, and once  clients  are  upgraded, then delete that  package, and  add Ru6 mp1  package