Endpoint Protection

Hi All,

           I want to upgrade my SEPM's from version 12.1.5 to 12.1.6. I have the 12.1.6 install files that I downloaded via Symantec Fileconnect a couple of weeks a go. Are these still the current ones to use as i also need to make sure I have good Windows 10 client compatability. I had an email last week or the week before from Symantec indicating that they would would be issuing an update to cover Windows 10 clients on its release date. But I have seen nothing more since. As I have to go through a change request procedure at work to carry out the updates I was hoping to get this done in one go. Not just to have to update to 12.1.6 and then a few days later have to apply another update patch for the Windows 10 client compatability.

Thanks

PaulC

You need 12.1.6.1 for Win10 support. This patch just came out on the 29th so the files you have are old and you should download the latest one.

See here:

What's new in Symantec Endpoint Protection 12.1.6 MP1

 http://www.symantec.com/docs/HOWTO119371

12.1.6.1 can be upgraded from all versions of 12.1:

Upgrade or migrate to Symantec Endpoint Protection 12.1.6 or 12.1.6.1

Hi PaulCab,

I think you're looking for this article:

Endpoint Protection support for Windows 10
http://www.symantec.com/docs/INFO2746

Hope that helps!!!!

Hi,

Thank you for posting in Symantec community.

SEP 12.1 RU6 MP1 is the latest release. Make sure you have downoaded the latest version.

You can upgrade to Windows 10 with Symantec Endpoint Protection 12.1.6 MP1 installed. You must uninstall earlier versions of Symantec Endpoint Protection. The operating system upgrade stops if it detects an earlier version of Symantec Endpoint Protection.

The following operating system upgrade paths are supported with 12.1.6 MP1 installed:

• Windows 8.1 to Windows 10
• Windows 8 to Windows 10
• Windows 7 to Windows 10

Will 12.1.5 SEPM handle WIN10 clients on 12.1.6.1?

I'm in the process of verifying that some legacy machines have TLS enabled before upgrading the SEPM's. I'd like to get this in testing though!

I am doing the upgrade from 12.1.2 to 12.1.6. MP1 as well. Are there instructions on how to do the upgrade?

Do you need to break replication between the servers, like in other versions?

Any issues?

Keep an eye on this thread:

https://www-secure.symantec.com/connect/forums/unsupported-upgrade-paths-sep12ru6mp1

One doc says you cannot upgrade from previous versions to 12.1.6.1 while another doc says you can.

Frankly, I have no clue which is right at this point but I'm not movig to 12.1.6.1 just yet so I'm not concerned but others should be aware.

@Brian

There is a lot of conflicting information out there. That is why I am just trying to test while retaining 12.1.5 SEPM as well.

If upgrading from 11.x you need to break replication. With 12.1.x to 12.1.x you do not.

Delete replication partners when:

• Upgrading the SEPM from SEP 11.x to 12.1.x.
• Updating the SEPM server certificate.
• You need to execute Support-supported tools.
• You perform software or hardware maintenance on the SEPM.
• Backing up database manually.

http://www.symantec.com/docs/TECH160642

Never hurts to be on the safe side and break it though.

Here is the link for that upgrade:

https://support.symantec.com/en_US/article.TECH230601.html

Yes, you will need to break replication if you're moving from 11.x

*edited to note replication in supplied tech article*

Duplicate*

Yep I know :) I plan to wait this one out and see what everyone else has to deal with and go from there.

I don't like what I am hearing on here at the moment. I have scheduled my upgrade from 12.1.5 to 12.1.6 MP1 for tomorrow evening (Wednesday). But when I read your uncertanty that there may be issues, I think I will pull the plug on the update until there is a clear line of confidence from all you guys.

PaulC

I'm waiting it out until documentation is consistent and sure that issues are at a minimum.

I have a test environment so that works for now.

Mark my words, Symantec Endpoint Protection 12.1 and later does not require that you turn off replication before you upgrade. Symantec Endpoint Protection 12.1 and later does not allow replication if the database schema versions do not match.

Recently we have updated this article as well with detail information: http://www.symantec.com/docs/HOWTO81188

OK so Chetan, you say that 12.1.5 to 12.1.6 MP1 should be a smooth transition? I have only two SEPM's both are 12.1.5 at the moment. Plus Maybe 20 to 30 'Old legacy' machines still with SEP11 clients on them as they are now unsupported OS's. I shldoudl have no db schema mismatches. I can assume that I must be good to go on my upgrade then??

Paul,

Please verify that TLS is enabled. Your upgrade will throw up an error notifying you of this if you have legacy machines out there.

It should be a smooth transition. However always follow the best practice guide outlined here: Upgrade or migrate to Symantec Endpoint Protection 12.1.6 or 12.1.6.1

http://www.symantec.com/docs/TECH230601

Kindly go thorugh this article as well. Do you have Windows XP or 2003 clients in the network?

http://www.symantec.com/docs/TECH225689

Hwere you chaps, Just got sent these links by a good friend to add to the upgrade mix...

http://www.symantec.com/connect/forums/vulnerabilities-sep-client-and-sepm-upgrade-sep-121-ru6-mp1

and

http://codewhitesec.blogspot.de/2015/07/symantec-endpoint-protection.html

interesting reading.

As said by Mick, Please take measures to upgrade your environment. If it is not possible to upgrade immediately.  Also, ensure that SEP's IPS component is installed and enabled.  The following new IPS signatures will offer protection against attempted exploits of the vulnerabilities:

• 28651 (Web Attack: SEPM SQL Injection)
• 28650 (Web Attack: SEPM Directory Traversal)
• 28649 (Web Attack: SEPM unauthenticated password reset)

They have released a newer version today: Symantec 12.1.6 MP1a  

You might want to see about going to that version.

I understand that there was a security issue with 12.1.6 and prior versions. I believe that 12.1.6 MP1 fixed the issue. Here's the article about the security issue:

https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00

Hi Guys, just to update you all. I went with the 12.1.6MP1a update last week. All went ok. Seemed to be slightly slower than normal for the clients to chack back in but all is good now. SEPM's seem to be happy at the moment.

Thanks again for all your advice and help. As usual it is all very much appreciated..

You are welcome.

Hi Guys,

I have Upgrade SEPM from 12.1.5 to 12.1.6

all my client computers will get auto update from 12.1.6 or need to push the package deployment.
Please let me know the correct method to push the package to client

Symantec Endpoint Protection clients will not upgrade automatically once the Symantec Endpoint Protection Manager has been upgraded. Further action is required on your part to complete the client upgrade process

After SEPM upgrade can upgrade clients using auto upgrade feature if all the clients are on the same network. Let me know if three any clients at WAN network.

Refer this guide to ues auto upgrade feature: https://www-secure.symantec.com/connect/articles/sepm-121-auto-upgrade

There are some other methods available as well like you said, push deployment wizard or third party deployments. I would recommend to go with most easiest way like Auto upgrade.