Endpoint Protection

Hi all, I need help...i am upgrading from symantec 11 to 12.1. The environment is on SEP 11 is installed on a physical server, using an embedded  database,  1000 clients. The upgrade will be done on  virtualised environment and will maintain the embedded database (an external DB sever is still an option though). Biggest challenge is that the SEP 11 environment is somehow corrupted. What are  the implications of scraping off the SEP 11 installation and then starting afresh? How important is the database, in terms of an upgrade? Recovering of a database versus redoing policies and checking clients in from scratch. Please advise

Check this KB:

Best practices for upgrading to Symantec Endpoint Protection 12.1.2

if you start over fresh, you will need to connect all the clients back up by replacing their sylink file.

If you can recover it, this would always be recommended as it can be tedious to start fresh and reconnect all the client. The above link should guide you through it

If you suspect the SEPM environment is corrupted at this point it may be better to start fresh deployment of 12.1 SEPM instead of upgrading to avoid future problems.

In 12.1 ru2 the replacing of communications settings = sylink should not cause many problem - is much more automated now - have a look here:

https://www-secure.symantec.com/connect/articles/sep-121-ru2-and-reset-client-communication

Policies from SEPM 11.x can be easily exported and imported in the new SEPM:

http://www.symantec.com/docs/TECH106486

Have a look as well on the documentation regarding 12.1 ru2:

https://www-secure.symantec.com/connect/articles/knowledgebase-articles-symantec-endpoint-protection-121-ru2

Hello,

Biggest challenge is that the SEP 11 environment is somehow corrupted.What are  the implications of scraping off the SEP 11 installation and then starting afresh? How important is the database, in terms of an upgrade? Recovering of a database versus redoing policies and checking clients in from scratch. Please advise

What do you mean by SEP 11 environment is corrupted? What in the SEP 11 environment you feel is corrupted?? For example - Communication, clients, policies, installation, database, etc....

If the SEP Embedded database is corrupted then it is advisable to start a fresh or else there are high changes of failed migration.

Symantec Embedded Database is the database where the groups, policies, logs, client data etc is stored. So Symantec Embedded Database plays an important role to have the SEPM running. Secondly, when the SEPM upgrade is done, the same database schema is updated with the Latest version of SEPM schema which in terms keeps the database information intact.

When you ask about "Recovering of a database versus redoing policies and checking clients in from scratch."- 

In case of Corrupted Database there are slim chances of recovering the database. However, to let you not recreate the policies, you could export and import the same to the Latest SEPM.

http://www.symantec.com/docs/TECH106486

Secondly, it is easy to recover the clients back to the new SEPM as well.

http://www.symantec.com/docs/HOWTO80762

Here are the Few Articles which may assist you -

Best practices for upgrading to Symantec Endpoint Protection 12.1.2

http://www.symantec.com/docs/TECH163700

Planning for Migration to Symantec Endpoint Protection Manager 12.1

http://www.symantec.com/docs/TECH162730

SEP 11.x to SEP 12.1 Upgrade process graphical overview

https://www-secure.symantec.com/connect/articles/sep-11x-sep-121-upgrade-process-graphical-overview

WhitePaper for Migration: https://www-secure.symantec.com/connect/downloads/migration-whitepaper-symantec-endpoint-protection-version-121

Quick Access to Symantec Knowledgebase Articles of Symantec Endpoint Protection 12.1

https://www-secure.symantec.com/connect/articles/quick-access-symantec-knowledgebase-articles-symantec-endpoint-protection-121

Hope that helps!!