Endpoint Protection

Hi,

May I know why some ofthe workstation in my group / OU is not updating the SEP client to version 12.1 ?

I have issued Reboot request but then It doesn't gets updated from v 11.0.4 into 12.1 RU1 ?

Hello,

Here there are few things to check.

1) What operating System are these machines carrying?? Are these Windows 7 machines??

2) Are SEP clients communicating to the SEPM server.

Suggestions:

If incase these machines are Windows 7 machines, I would recommend you to:

a. Disable the Windows Firewall or create exceptions for the ports on these machines to communicate to the SEPM http://www.symantec.com/docs/TECH163787

b. Disable the UAC (User Account Control) and restart the machine.

c. If that does not work, please provide us with sylink.log from one of those machine.

http://www.symantec.com/docs/TECH104758

No, it is all WIndows XPSP3 with SEPM v 11.0.4 connected with green dot to the existing SEPM v 12.1

post the sylink log from the client.

try to replace syslink.xml and restart system

or.

You can try checking the Communication settings by:

1) Logging to SEPM

2) Clients TAB

3) Highlighting the Group and Click on Policies TAB

4) Communication Settings

5) Check the Download policies in Push / Pull mode and Heart Beat Interval.

By default it is suppose to be in Push mode and Heartbeat Interval of 5 min.

Check this thread

http://www.symantec.com/connect/forums/client-sepm-communication-issues-after-upgrade-sep-121

Are you trying to upgrade them using Auto Upgrade package? Or Deploying package?

Trying doing manual install on one of the machine to check why it is failing.

Hello,

Is the SEPM migrated to the Latest version of SEPM 12.1 RU1?

Good question above.

How are you upgrading these clients? Is that via Migrating and Deployment wizard OR via Autoupgrade?

Are you receiving any error message while migrating?

Could you check if these clients are receiving the packages OR not?

Check the Application logs under Event viewer of the client machines for any installation failure error.

Check the SEP_Inst.log under %temp%, you could upload these logs to us as well.

There are few things which needs to check, preparing clients for migration for 12.1, check the Article below:

Steps to prepare computers to install Symantec Endpoint Protection 12.1 client 

http://www.symantec.com/docs/TECH163112

Hope that helps!!

Mithun,

Yes the SEPM is v 12.1 RU1 and I am not upgrading it yet to MP1

How are you upgrading these clients? Is that via Migrating and Deployment wizard OR via Autoupgrade?

Well what I did is to assign install package to the group, only these several clients is not upgraded yet.

Ashish,

WHat do I replace the Sylink.xml with ?

the existing Sylink.XML is not causing any issue since I can see the green dot, but somehow the upgrade is failed or not upgrading at all ? The user also not being prompted at all.

hi John ,

You can Upgrade your SEP Client for Auto upgrade feature.

http://www.symantec.com/connect/articles/upgrade-clients-sep-121-auto-upgrade-feature

Ashish,

Yes that is what I've done so far.

HI,

If you have using  Auto upgrade feature but till now SEP client are not update,

First you can check restart system.

You can use Push Deployment Wizard

Overview of Push Deployment Wizard in Symantec Endpoint Protection 12.1

http://www.symantec.com/connect/articles/overview-push-deployment-wizard-symantec-endpoint-protection-121

Hi John,

How many machines are yet to get upgraded?

There may be some machines where reboot is required you can check that by changing the view to client status.

Incase if the status is YES then REboot is required for the client to get upgraded.

Once the package is assigned on the group, you can check C:\Program Files\Symantec\Symantec Endpoint Protection\Smclu folder on the client to see whether the client package has been pushed from the SEPM to the target machine. You can also check the config.xml file on the client machine.

If you want the clients to get upgraded asap then you can select the below option,

Please note using the above option would increase the network bandwidhth.

Ariv, So by unselecting the checkbox to "Upgrade Schedule" does that means the SEP client will be automatically upgraded directly at the same time ?

Hi John,

By unchecking the "Upgrade Schedule" option means you are asking the clients to get the upgrade packages from SEPM at anytime.

Which means that it could be instaneous altogether at once for all workstation in the group ?

well it depends on heartbeat, becuase not all clients in one group communicates to SEPM at the same time.

Ah OK, so if somehow I forgot to turn it on, then the client will be upgraded directly rather than not upgraded at all ?

it will be upgraded 

Thanks Pete for the clarification !