Endpoint Protection

I'm a System Admin/ISSO for a federal defense contractor and we have mulitiple systems running 12.1.6 MP6 SEP/SEPM. All of our systems are completely offline and cannot be allow to connect to the internet. We are utilizing the manual methods of updating the virus defenitions on the standalone and managed clients/servers. I'm evaluating potential issues with upgrading to the newest SEP/SEPM verison 14. Additionally, we have a particular set of Windows Security Settings, Account, Local System and User rights policies that must be configured on the Windows 7 SP1 and Server 2008 R2 SP2 OS we must utilize. I have run the Symantec System Diag Tool on all the systems and it doesn't seem to give much specific configuration issues. I can provide the particular Windows security settings, etc,... as well. I'm needing some more in-depth assessment of everything before we can begin to upgrade our SEP/SEPMs.

The attachment has the specific Windows security settings, etc,...

Attachment(s)

DSS_SecuritySetting_0.docx   682 KB 1 version

Are you asking if these Windows settings will conflict with version 14 in some way?

Yes

The SEP 14 SEPM will still be able to control 12.1.6 clients and above. I'd set up a test server to test if there are any confilicts in a lab environment if you have it. 

Below link is some other things to take into consideration
https://support.symantec.com/en_US/article.HOWTO125362.html#v106486097

I had reviewed the 'What's new in Symantec Endpoint Protection 14' article quite a few weeks ago but after setting up a couple standalone SEP 14 clients for testing. I found out that new manual defs for 12.1.3 up do not work with the SEP 14 clients and there was a separate site for the SEP 14 defs. Furthermore, you could not even navigate to the site without having the specific url address at the time. Consequently, We are very concerned about a large scale domain upgrade if something small like that is overlooked. 

Also, the following is the link to the Tech article: http://www.symantec.com/docs/TECH102607

That's because SEP 14 on supports SEP 12.1.6 clients and above.

But the recently released 12.1.6 MP6 should be supported by symantec for a few more years yet, to allow you to plan a better upgrade and testing path for SEP 14. :)