Video Screencast Help

SEP self managed vs centrally managed

Created: 13 May 2011 • Updated: 13 May 2011 | 4 comments
This issue has been solved. See solution.

My company currently has licenses and is considering deploying SEP 11 client to all of out machines.  We currently have Symantec Antivirus 10 that is entriely server managed.

Is there anything wrong with having technicians go around and install the clients all as self-managed, configure the settings they want for updates and scans, and then leave them as unmanaged and never even install a server client?

Or is having a management server that downloads all the updates and distributes them to clients and can command all managed clients really a much better option?

Also, if I setup a client as managed, will I still be able to do scans manually on those clients and pull updates from Symantec manually should I so choose?

Comments 4 CommentsJump to latest comment

P_K_'s picture

Is there anything wrong with having technicians go around and install the clients all as self-managed, configure the settings they want for updates and scans, and then leave them as unmanaged and never even install a server client?

---There is nothing wrong , but it will take time and would be hectic and tiresome for you.

Or is having a management server that downloads all the updates and distributes them to clients and can command all managed clients really a much better option?

--THE BEST OPTION

Also, if I setup a client as managed, will I still be able to do scans manually on those clients and pull updates from Symantec manually should I so choose?

---YES, all can be configured from SEPM.

 

So please do not hesitate and go for a managed installation of SEP with SEPM. It would give you ease of adminstartion and reporting and much more

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

SOLUTION
Mithun Sanghavi's picture

Hello,

 

I have suggested the below Steps for Migration from SAV 10 To SEP 11.0.6005 (Normally, Customers would like to Install SEPM on either the same Server where the Symantec System Center is Installed OR on Different server computer)

Before you start with the Procedure of migration, make sure, you disable the Security Password to disable SAV clients from SSC.

 

1) Install Symantec Endpoint Protection Manager,

2) Create new SEP 11 packages for new Deploy on all the other machines.

3) Deploy the packages to all SAV 10 client machines, which will migrate all the clients to SEP (this could be done either with the help of "Migration and Deployment Wizard" OR "Find Unmanaged Computers"

Till the time the migration is over, the clients which haven't migrated from SAV 10 will communicate to Symantec System Center 10.

4) Once all the machines have been migrated from SAV 10 to SEP 11.6005

(Except on the same server machine where the Symantec System Center 10 is installed, as SEP will not get installed till Symantec System Center 10, SCS 3.1 is uninstalled.),

5) Uninstall Symantec System Center 10, SCS 3.1 on the server

6) Install SEP on the same machine where the Symantec System Center 10 was uninstalled.

 

Symantec Knowledgebase Articles for Migration.

1) How To Migrate From Symantec Antivirus System Center Console To Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?page=content&id=TECH106485

2) Obtaining an upgrade or update for Symantec Endpoint Protection 11.x or Symantec Network Access Control 11.x

http://www.symantec.com/business/support/index?page=content&id=TECH103088

3) 'Installing and configuring Symantec Endpoint Protection 11 for the first time'

http://www.symantec.com/business/support/index?page=content&id=TECH102397

4) Creating custom Client Installation packages in the Symantec Endpoint Protection Manager Console

http://www.symantec.com/business/support/index?page=content&id=TECH102817

5) How to Deploy Symantec Endpoint Protection to your client computers using the Migration and Deployment Wizard.

http://www.symantec.com/business/support/index?page=content&id=TECH102907

 

 

NOTE: Make sure, you upgrade SAV 10 to SEP 11.0.6005 and later to SEP 11.0.6300

 

Migrating to Symantec Endpoint Protection 11.0.6300 (RU6 MP3)

 
Hope these would help you!!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

sandra.g's picture

I don't believe it is necessary to go from SAV > SEP RU6a > RU6 MP3, and IMO just needlessly lengthens the process. The SEPM installation is considered new--it is not a migration, since no SEPM has yet existed. There are no database schema changes etc. about which to be concerned.

The SEP client should be able to seamlessly migrate over any SAV build on the 'supported migration path' list, per the document noted above:

How To Migrate From Symantec Antivirus System Center Console To Symantec Endpoint Protection Manager
http://www.symantec.com/docs/TECH106485

sandra

Symantec, Information Developer
Installation, Migration, Deployment and Patching
User Protection & Productivity, Endpoint Protection

Don't forget to mark your thread as 'solved' with the answer that best help

Vikram Kumar-SAV to SEP's picture

 

Is there anything wrong with having technicians go around and install the clients all as self-managed, configure the settings they want for updates and scans, and then leave them as unmanaged and never even install a server client?

Ans. If you have less than 10 Clients then only Unmanaged clients will be a suitable option. Or else Having a Management Server is best option, you can manage the clients well and all clients willl not have to download full definitions.

 

Or is having a management server that downloads all the updates and distributes them to clients and can command all managed clients really a much better option?

SEPM server is always better option. As you have single control for all clients however clients can run scan, disable AV,Firewall etc and do everything that you can do from the SEPM.

 

Also, if I setup a client as managed, will I still be able to do scans manually on those clients and pull updates from Symantec manually should I so choose?

Yes You can.

Vikram Kumar

Symantec Consultant

The most helpful part of entire Symantec connect is the Search button..do use it.