Endpoint Protection

I want to upgrade several Windows 2003 SP2 servers running SAV 10.1 to SEP 11.x (whatever the latest release is when I do this (11.5?)

This is not a managed environment (simple stand-alone installation).

What is the correct procedure?

On a workstation, I simply inserted the SEP 11.4 CD and ran the install program. It apparently knew what to do and upgraded the AV program without a problem.

However, since I am now dealing with servers that play a key role in our organization, I feel it would be prudent to double-check that this is indeed the correct procedure.

For example, the upgrade process installed the network protection component on the workstation. Will it realize that this should not (cannot?) be installed on a server?

Moreover, on our two domain controllers, exceptions were made for various folders (the one containing the ntds.dit Active Directory database, among others).

Will the SEP upgrade process retain those settings? Or is it (like I seem to have read somewhere) "intelligent" enough to create exceptions for those folders and files automatically?

Lastly, when is the "sunset" date for SAV 10? Is it even necessary (or recommended) that I upgrade?

Thank you  in advance,

David

For example, the upgrade process installed the network protection component on the workstation. Will it realize that this should not (cannot?) be installed on a server?

No..it would not know that wil install all the components.
when u run the setup. click custom and select only what you want to be installed.
only then custom installation would take place.

Moreover, on our two domain controllers, exceptions were made for various folders (the one containing the ntds.dit Active Directory database, among others).

yes it will be excluded.

https://www-secure.symantec.com/connect/forums/recommended-exclusions-servers-sep
 

Will the SEP upgrade process retain those settings? Or is it (like I seem to have read somewhere) "intelligent" enough to create exceptions for those folders and files automatically?
 yes wil be excluded
https://www-secure.symantec.com/connect/forums/recommended-exclusions-servers-sep

Lastly, when is the "sunset" date for SAV 10? Is it even necessary (or recommended) that I upgrade?

http://customercare.symantec.com/app/answers/detail/a_id/97

let me know if you have any questions...:)

SEP  client software automatically detects the presence of certain third-party applications and Symantec products. After it detects them, it creates exclusions for these files and folders. The client excludes these files and folders from all antivirus and antispyware scans.

 The Sun will not set so early...SEP only knows about exclusion for Exchange and Active Direcotry so do create neccesary exclusions and do verfiy the exclusions as well using this doc
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008090512574448

Manually remove Netowrk threat Protection and Proactive Threat Protection using add/remove programs -higlight SEP- Change-Mdofiy then de-select them using the scroll down menu.

Getting back to this...!!!

OK, thanks to all you guys.


So I just put in the CD, run setup, customize as needed and let SEP do the rest?

No need, then, to un-install the old version? 


Thanks once again.

Yes no need to uninstall
the installation process would uninstall and then proceed with your current customized install.
let me know if you have any questions