Endpoint Protection

We have upgraded our SEPM server to 12.1 and all is well. All our clients and GUPs are 11.0.7.

Should we upgrade GUPs first so they can pull the AV defs, and will they pull both 12 and 11 AV defs?

Hello,

Once you have upgrade the SEPM to the 12.1, then migrate all the GUP clients first and then all the client machines.

"The recommended order is to upgrade all Symantec Endpoint Protection Managers, Group Update Providers, and then the remaining clients as needed."

Please take a look at the latest how-to article created by our very own SEP content council team.

Best practices for upgrading to Symantec Endpoint Protection 12.1.x

http://www.symantec.com/business/support/index?page=content&id=TECH163700

It is recommended to have the SEPM and GUP clients of the same version. Group Update Providers that run earlier versions of Symantec Endpoint Protection cannot deliver content updates to clients that run the current release of Symantec Endpoint Protection.

Hope that helps!!

Do the GUPs first than the clients.

Yes, because there has been some changes with definitions. in 11 we have PTP but in 12 its sonar.

–     Group update providers (GUPs) are fully backwards compatible. A 12.1 manager can manage 11.0 GUPs and 12.1 GUPs can update 11.0 clients.

Ok, I will give that a go then. Thanks!