Endpoint Protection

I'm beginning the project to upgrade our SEPM/clients to SEP 14 from SEP 12.1.6MP6, and I need anyone state any issues they came across during upgrade or any issues they have had with clients. Anyone seen a major/minor benefits? The SEPM console does it still use Java or did they switch to HTML5? How is detection, has it improved?

Thank you everyone for your time.

The benefits from the new components/features are a huge plus, listed here:

http://www.symantec.com/docs/HOWTO125362

The console still uses Java, unfortunately. And if you have XP /2003 clients they will need to stay on 12.1 as 14 no longer supports these operating systems.

I've only heard of one issue of someone experiencing a machine not booting up properly after the upgrade from 12.1 to 14 but that was only one person so I can't say how many were actually affected and what other environmental factors were apart of that.

Someone also posted an issue they had on the upgrade to 14 for the SEPM:

https://www.symantec.com/connect/forums/updating-sepm-1216-mp6-14

And one last one:

https://www.symantec.com/connect/forums/updatetrustedsitesexe-error-sep-14x-windows-10-1607-system-center-config-manager-client

Biggest con is 

Symantec Endpoint Protection Manager no longer supports:

Thank you so much for the response, i was hoping for more than a press release opinion, but an actual real world usage.

I saw that person posting on cert and I'm hoping to avoid issues such as that. I've been having a hard time getting our CA cert to install into Symantec since its a two part cert, so I have been just using the self-signed one for now.

If the console is still Java, does it appear to move more quickly, and possibly use less memory?

That thankfully won't be an issue.

Our last server was a 2k8 using the internal database, but as we started coming near to the 5k client max, I just finished moving us to a 2k12 with an external 2k16 MSSQL server with support from our DBA's.

The new features are the pro's, which is what I was trying to point out. 14 hasn't been in production long enough to make a determination on how the new features have remediated risk compared to 12.1. I'm sure Symantec has numbers on telemetry but I don't know if they've been shared yet.

I've not noticed any improvements in console performance although I've not had any complaints about performance ever.

Your best option is to spin up a test environment and have at it.

Thank you again, I'll probably ask our SE's to do that for me with a snapshot.

Hi,

Can go through this guide to understand how upgrade process will take place:

SEPM 14.0 can be installed/upgrade on 64 operating systems only. It still uses JAVA console. 

This is how it looks like now:

Go through the following article:

SEPM 12.x to SEPM 14.0 Upgrade process graphical overview with Embedded databa

https://www.symantec.com/connect/articles/sepm-12x-sepm-140-upgrade-process-graphical-overview-embedded-database

Here is the list of SEP 14.0 articles:

• Release notes: http://www.symantec.com/docs/DOC9446                                                                                                                                                            
• What’s new for SEP 14: http://www.symantec.com/docs/HOWTO125362                                                                                                                                   
• Upgrade best practices for Endpoint Protection 14 http://www.symantec.com/docs/HOWTO125386                                                                                          
• Upgrade or migrate to Endpoint Protection 14 http://www.symantec.com/docs/TECH236071                                                                                                                                                                  
• New fixes for SEP 14: http://www.symantec.com/docs/INFO4000                                                                                                                                              
• Quick Start Guide (PDF version): https://support.symantec.com/en_US/article.DOC8227.html                                                                                                   
• Quick Start Guide (HTML version): https://support.symantec.com/en_US/article.HOWTO12441.html                                                                                                                                 
• Installation and Administration Guide: http://www.symantec.com/docs/DOC9449                                                                                                                
• Product guides for all versions of SEP 14:  http://www.symantec.com/docs/HOWTO124729                                                             
• Release notes and system requirements for all versions of SEP:  http://www.symantec.com/docs/TECH163829                               

Other related articles:

• Windows Client Guide: http://www.symantec.com/docs/DOC9445                                                                                                                                                     
• Linux Client Guide: http://www.symantec.com/docs/DOC9444                                                                                                                                                     
• Symantec Endpoint Protection Manager 14 REST API Reference: http://www.symantec.com/docs/DOC9447                                                               
• Symantec Endpoint Protection 14 Remote Monitoring and Management SDK: http://www.symantec.com/docs/DOC9448  
• Database schema reference for Endpoint Protection 14: http://www.symantec.com/docs/DOC9438 

The cons for us is that we're losing vShield-SVA, so we need to do some planning to move away from it before starting the upgrade to v14.

SEPM 14.0 can be installed/upgrade on 64 operating systems only.

Are you sure?

Or 64Bit Server operating systems?

SEPM (the management server software) can only be installed on 64bit server operating systems.

SEP (the client) can be installed on 32 bit computers still.

Tony-

I'm working with one of our clients who wants to upgrade from 12.x to 14 and there currently use the SVA.  I see you mentioned the lack of a SVA as a con.  How would you recommend proceeding without it?