Endpoint Protection

 View Only
Expand all | Collapse all

Two SEP management console

  • 1.  Two SEP management console

    Posted May 30, 2014 07:14 AM

    Good afternoon

    I've been reading several articles in this forum, and I'd like to know if somebody can give an advise.

    I've got one SEP Management Console (v12.1.R4) where I manage my desktops and servers clients.

    I'd like to split this environment in two consoles, one for servers, one for clients.

    After reading several solutions, what would you do?

    • Install a new console but sharing same DB and after that modify the 'Communications settings' and point the folders where I have my desktops to the new console.
    • Create an independent environment (with its own console and SQL server) and migrate all desktops clients to my new environment.
      • If I choose this option, could I migrate only some clients? Because what I read was to migrate all clients.

    Thanks

     

    Diego

     

     

     

     



  • 2.  RE: Two SEP management console

    Posted May 30, 2014 07:18 AM
    Well you could have two totally separate ones but why? Just create separate groups for each and manage that way. They be managed independently of one another. Seems like alot of extra work to have two consoles for that


  • 3.  RE: Two SEP management console

    Posted May 30, 2014 07:22 AM

    Thanks for your answer Brian

    Reason to do this is because desktops should be manage for other different team in my company and I don't want to give them rights in a place where there are servers.

     

     

     



  • 4.  RE: Two SEP management console

    Posted May 30, 2014 07:34 AM
    You can set them up so they can't access/manage the server group.


  • 5.  RE: Two SEP management console

    Posted May 30, 2014 08:42 AM

    Thanks Brian

    I know that, but anyway I want to split out that in two different consoles.

    Any advice?

    Thanks

     

     

     

     



  • 6.  RE: Two SEP management console

    Posted May 30, 2014 09:19 AM

    Easiest way is to just install a separate console and replace the sylink on the servers to point to the new one.

    Unless of course you want to replicate those servers with only one DB...then use replication.

    Otherwise, if you want it all separate, just install the new console



  • 7.  RE: Two SEP management console

    Posted May 30, 2014 09:30 AM

    Rather than creating  a new SEPM and DB its better to split them around domains ( SEPM domains)

    Create a new Domain in SEPM, take the Sylink and replace it.... whenever you want to switch between Servers and clients, just switch the domains

    About domains

    http://www.symantec.com/business/support/index?page=content&id=HOWTO55042

    How to deploy/update communication settings from your SEPM to your SEP clients machines with SEP 12.1 RU2

    http://www.symantec.com/business/support/index?page=content&id=TECH199124



  • 8.  RE: Two SEP management console

    Posted Jun 02, 2014 05:36 AM

    Hi,

    creating domains seems the best option to obrtain high segregation without making your infrastructure more complex than required. If you don't want to share even the access to the host server, you can simply share the only remote console access with the desktops administrators.



  • 9.  RE: Two SEP management console

    Broadcom Employee
    Posted Jun 02, 2014 08:17 AM

    Hi Diego,

    Create a new domain or Create an independent environment (with its own console and SQL server) and migrate all desktops clients to my new environment.

    Q. If I choose this option, could I migrate only some clients? Because what I read was to migrate all clients.

    --> You can select the clients, not mandatory to migrate all the clients.



  • 10.  RE: Two SEP management console

    Posted Jun 03, 2014 06:34 AM

    Hi Chetan

    Can you show me the link where I could see the process to migrate only some clients, please?

    Thanks

    Diego



  • 11.  RE: Two SEP management console

    Posted Jun 03, 2014 06:35 AM

    Easiest way is to move them to their own group to keep them segregated. From there you can auto-upgrade the this group only