Endpoint Protection

Hello,

I have a couple questions:

1) Does the DB backup done from within the SEPM also backup all the firewall rules, all the policies and their respective assignments? I was running through the Symantec Best Practices document on disaster recovery and it dawned on me that having to re-create all those rules and custom policies would be quite a chore.

2) Can and MR or MP version be uninstalled or written over with an older version from the SEPM? For example, lets say I have MP1a deployed to 1000 machines and I decide to start deploying MP2, after deploying MP2 to a hundred or so machines we realize that MP2 is breaking machines that have some other required software loaded....is it then possible to "undo" or "revert" all those MP2 machines back to MP1a without manually touching each one? Can I just change the install package assigned to that OU to an older version?

Thanks for any thoughts,

-Mike

Hi,

here are the answers:

1) If you will apply the Disaster Recovery procedure you will be able to fully restore your SEPM

2) You can't automatically downgrade your SEP clients

If these answers are enough, remember to select this post as a solution to avoid duplicated answers.

Regards,

I add some details:

1) anything is stored in the DB, the Disaster Recovery procedure asks you to backup it, therefore restoring it means restoring your settings
2) when you try to overinstall a new version with an old version, you will get the message "you already have a newer version installed"...

Best regards,

1) Your saying that everything (all SEPM settings) are stored in the DB? Backup the DB, and you've backed up everything.

2) The only way to install an older version of SEP is by first uninstalling the "new" version?

Thank you for the help!

-Mike

you are welcome, here are some clarifications:

1) the DB does not store the required settings to restore the communication with the clients, the Disaster Recovery procedure explains you what you have to backup to restore the communication as well
2) Yes, eventually you can issue a MSI command via GPO.

Regards,