Endpoint Protection

Hello,

I am intersted in upgrading a SEP 11 client to a SEP 12.1 client on a server.

Endpoint Configuraiton:

Server 2008 R2

Basic Protection for Servers (AV only)

SEP 11 client -> SEP 12.1 client

I was under the impression that you could push install the SEP 12.1 client and directly upgrade the SEP 11 client and that you would not need to do a reboot. However, I have found that when you push install the SEP 12.1 client, it partially uninstalls the SEP 11 client and waits for a reboot. On reboot it finishes the installation of the SEP 12.1 client and configures the communication settings.

Do you always have to reboot an endpoint after an upgrade?

If so, is there an easier way to upgrade to the SEP 12.1 client without having to reboot 500 servers(and the associate change control process)?

For SEPM reboot is not mandatory. But for clients it is better to restart if your clients have NTP installed.(But this can be scheduled).

hi Check this forums.

https://www-secure.symantec.com/connect/forums/upgrade-clients-sep-121-ru1-mp1-server

Hello,

What version of SEP 11.x are running?

I agree with Ashish.

Migrating the SEPM would not require any reboots. However, when Migrating the SEP clients you may require a reboot of the SEP client machines. Network Threat Protection (firewall) drivers would require a restart of the machines to get themselves activated. However, these could be taken care off by creating custom package and avoiding the restart of machines.

Creating custom client installation packages in the Symantec Endpoint Protection Manager console version 12.1

http://www.symantec.com/docs/TECH165801

NOTE: You may have to restart the machine before the next migration or once the machine is ideal and out of production hours; whichever is earlier.

Hope that helps!!

Hi,

yes, it is. SEP client main components are drivers and services that, as per Windows architecture, require reboot to load properly.

11 > 12.1 is a different kind of installation than 11.x > 11.x+1 was. It's a side-by-side, replace on reboot model, instead. You will not get the 12.1 client protection until the reboot is completed, even if it is just only antivirus protection.

This document has a little more information about the process: http://www.symantec.com/docs/TECH163086

sandra

Thank you all for your help.