Endpoint Protection

Hi,

At our company we have different sites in Europe that we are using. I have 1 SEPM and I have multiple GUP in place divided over the sites..

The connections to these sites are not really great, some are 30mbit and some or 2mbit, depending on size of the site. How can I deploy my clients in the most sufficient way to these sites with little bandwidth? Can I deploy them through my GUP, or can I specify a location on that site where the install package should be?

The best scenario should be that I deploy the 32b and 64b to the site just one time, and it will be divided from that location..

Any ideas?

Hi Caspar.Willemensen,

The AutoUpgrade process lets you automatically upgrade the Symantec Endpoint Protection client software for all the clients that are contained in a group. For example, you can use AutoUpgrade to upgrade clients to a new maintenance release or product version.

You must test the AutoUpgrade process before you attempt to upgrade a large number of clients in your production network. If you do not have a test network, you can create a test group within your production network. For this kind of test, you add a few non-critical clients to the test group and then upgrade them by using AutoUpgrade. You confirm that the upgrade completed successfully by verifying the version number of the client software. The version number is displayed in the client's Help >About panel.

See About upgrading client software.

Hi,

That sounds good, so that should be the best practice?

And at number 7: "You can optionally stage and select a package on a Web server."

Should that be the setup.exe that I generated earlier for each of my sites?

Yes, it should be

Ok.. I just did a little test with a Test group I created. (they already have 11.7 installed)

When I go to Admin > Install Packages > Upgrade Clients with Package.
I tell the wizard to update from the manager (just for testing) on a group I created with 3 clients. At the "upgrade settings" I have only chosen to maintain the excisting client features.

When I finish the wizard, nothing happens on my test machines. When I rerun the wizard I get the error that I already have run this wizard for that group and therefore I cannot do it again.

How can I make sure this will be deployed to these machines?

HI Casper,

I read your site scenario which you described here. as you mentioned you wanted to updgarade clients with new revision. And secondly you mentioned that can you apply it through GUP?

Here I would like to mention that through GUP only you can update only definitions at your remote site clients systems which can be number of from 10 to 1000 and so on. At your site any one client will act as GUP , it will receive updates from SEPM and later distribute to your site systems to update. Means remote site system will not get definition update from SEPM and no bandwith issue , they will only talk to SEPM for policies etc according the heartbeat interval you specified on SEPM for clients.
 

Secondly you mention that you wanted to upgrade your cleitns with one SEPM. Here upggrade means to upgrade SEP revision, you can do that throuth SEPM console as described by Hidayet Altun, Vote up for his suggestion. But you did not mention about revision upgradation etc. or you only wanted to remote site systems only defenition update? please clear. 

for this you have two option for good bandwidht site you can update through SEPM console as suggested by Hidayet Altun, second method for low bandwidth site that you you push deployment wizard, you copy the newly created package from SEPM for the destined group at your remote site any system or server and also copy the remote push wizard exe. through this method the upgrade task will done at local site and no bandwidh issue occur, client wil update with new revision automatically locally , only you will have to enter the super user credential through remote push deployemt wizard in case of Domain site or for workgroup site you should have single administrator password for all the clients.

you can go through the following links for details. I think you will get answer accroding the scenrio of your sites.

http://www.symantec.com/docs/HOWTO55088

http://www.symantec.com/docs/HOWTO26781

http://www.symantec.com/docs/HOWTO55065

http://www.symantec.com/docs/HOWTO55066

http://www.symantec.com/docs/HOWTO55064

http://www.symantec.com/docs/HOWTO55086

Regards,

Ajay Singh

Ajay,

Only your last 2 links work correctly, the rest is going to the standard search option..

A final question, what happends when I deploy an upgrade package for 32bits, but the group has 32 and 64 clients. Does it only upgrade the 32bits? And does it work the same way for the 64bits versions?

Caspar

when I deploy an upgrade package for 32bits, but the group has 32 and 64 clients. Does it only upgrade the 32bits? And does it work the same way for the 64bits versions?

yes, clients will take the package which are compatible .