Endpoint Protection

i am migrating the current client version of NAV (10.1.8.800) to EPP on my companie's environment and one of the servers that has a NAV 10.1.8.8000 console was upgraded, since NoNav was ran the console was wiped out partially, so i had to go back with the changes, restore all the configuration files from the console, and of course reinstall the SCC and NAV Server. The problem is that the clients are not showing up on the console, to restore the files from all the locations involved i reinstalled the NAV Server and console, stopped the services and then performed the restoration, the configuration seems to be exactly the same, but the only server in the group is the one that holds the console.

I also ran all the discovery tipes, and it has found the other servers that used to have algon with himself, but it does not detects the clients it used to have.

a little update, i just got off the phone with Syamntec support, and they told me that the main reason why this clients are not reporting is because i lack the group structure that was configured, so in order to see the clients i should recreate that.

Since it was on the registry, i asked for a System state restore, but the dates i had backed up, were later thatn the one i need, so, i am contacting the Console owner to get the structure if he remembers it.

Do you guys think this will work, and do you think there is any other way of doing it?

Did you restore old PKI folder in the server..?

If you are not getting clients even after doing all these changes, Replace the GRC.dat & PKI Folder in the cliets.

On the intended parent management server, copy the Grc.dat configuration file from the Symantec AntiVirus program folder.
The default location on a Symantec AntiVirus Corporate Edition server is <OS drive>:\Program Files\SAV.
The default location on a Symantec Client Security server is <OS drive>:\Program Files\SAV\Symantec AntiVirus.
 
On the client computer, paste the Grc.dat file into the C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5 folder.
On the intended parent management server, open the pki\roots folder and copy the xxx.x.servergroupca.cer file.
On the client computer, paste the xxx.x.servergroupca.cer file into the pki\roots directory, which appears under the directory that contains the Symantec Client Security files.
After a few minutes, the client finds the Grc.dat file, makes the appropriate changes to the registry, and then deletes the Grc.dat file. 
REF:http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2005033015282148?Open&src=tranus_con_sl

Client will contact server based on the setting you have done in the console.... (Virus definition manager-->Check for updates every XX sec)

If you have a registry backup you can restore entire group and clients structure..
It will be under HKEY_LOCAL_MACHINE\SOFTWARE\Intel\LANDesk\VirusProtect6\CurrentVersion
You will find group and client keys under these keys you will have all the information.

  

 

The Backup policy does not allows me to get a sytem state that can hold the groups configuration, i did restore all the certificates on the pki folders. I will talk over the possibility of performing the fix on the clients, since this are workstations i am not sure of how many we are talking, the customer also told me that they agree to upgrade to EPP if needed. Do you guys see this as a good idea?

Ya... EPP is a very good product it has lot of features compared to SAV...
It a good idea to go for SEP.... 

Check these...
SEP FAQ..
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007071909500548 

Endpoint Security Migration & Installation
http://www.symantec.com/business/support/endpointsecurity/migrate/index.jsp


Comparison Tour - Symantec System Center vs. the new Symantec Endpoint Protection Manager
http://www.symantec.com/business/support/endpointsecurity/ssc_sep/