Situation
A previous version of Symantec Endpoint Protection (SEP) 12.x
or 11 exists on the network or on individual computers. You need to
migrate to one of the following versions of Symantec Endpoint Protection
12.1.
If you are migrating to Windows 10 as well as Symantec Endpoint Protection, you must migrate Symantec Endpoint Protection first. For more information, see Endpoint Protection Support for Windows 10
- Release Update 6 (12.1.6)
- Release Update 6 Maintenance Pack 1 / 1a (12.1.6 MP1 / MP1a)
- Release Update 6 Maintenance Pack 2 (12.1.6 MP2)
- Release Update 6 Maintenance Pack 3 (12.1.6 MP3)
- Release Update 6 Maintenance Pack 4 (12.1.6 MP4)
- Release Update 6 Maintenance Pack 5 (12.1.6 MP5)
If you are migrating to Windows 10 as well as Symantec Endpoint Protection, you must migrate Symantec Endpoint Protection first. For more information, see Endpoint Protection Support for Windows 10
Solution
Contents
- About this release
- Downloading this release
- Upgrading to this release
- Managing Endpoint Protection licenses
About this release
Find out what's new, learn about known issues, and get additional information about each release.
Downloading this release
Learn how to download the latest version of Symantec Endpoint Protection.
Upgrading to this release
Upgrade and migration paths
Symantec Endpoint Protection 12.1.6 can migrate seamlessly over the following:- Symantec Endpoint Protection 12.1.5337.5000 (RU5)
- Symantec Endpoint Protection 12.1.4100.4126 (RU4 MP1), 12.1.4104.4130 (RU4 MP1a), and 12.1.4112.4156 (RU4 MP1b)
- Symantec Endpoint Protection 12.1.4013.4013 (RU4) and 12.1.4023.4080 (RU4a)
- Symantec Endpoint Protection 12.1.3001.165 (RU3)
- Symantec Endpoint Protection 12.1.2100.2093 (RU2 MP1)
- Symantec Endpoint Protection 12.1.2015.2015 (RU2)
- Symantec Endpoint Protection 12.1.1101.401 (RU1 MP1)
- Symantec Endpoint Protection 12.1.1000.157 (RU1)
- Symantec Endpoint Protection 12.1.671.4971 (RTM)
- Symantec Endpoint Protection 11.x
- Symantec Endpoint Protection Small Business Edition 12.0 (the reverse is considered a downgrade and is not supported)
- Symantec Endpoint Protection 12.1.6168.6000 (RU6)
- Symantec Endpoint Protection 12.1.6306.6100 (RU6 MP1)
- Symantec Endpoint Protection 12.1.6318.6100 (RU6 MP1a)
- Symantec Endpoint Protection 12.1.6465.6200 (RU6 MP2)
- Symantec Endpoint Protection 12.1.6608.6300 (RU6 MP3)
- Symantec Endpoint Protection 12.1.6867.6400 (RU6 MP4)
Upgrade process
Upgrading to the current version of Symantec Endpoint Protection involves the following steps, in order:- Step 1: Create an upgrade plan
- Step 2: Back up and prepare for disaster recovery (critical)
- Step 3: Prepare Symantec Endpoint Protection 11.x managers
- Disable replication
- Disable the "Protect client files and registry keys" Application Control Policy
- Remove client packages assigned to the client groups
- Step 4: Enable local authentication
- Step 5: Stop the Symantec Endpoint Protection Manager service
- Step 6: Upgrade the Symantec Endpoint Protection Manager
- Step 7: Enable replication after upgrading
- Step 8: Upgrade the Symantec Endpoint Protection clients
Step 1: Create an upgrade plan
Before you install the Symantec Endpoint Protection client, manager, and any administration upgrades, you should have a solid understanding of your network topology and create a streamlined plan to maximize the protection of your network during the upgrade.Best practices:
- Symantec recommends that you do not perform third-party installations simultaneous to the installation or upgrade of Symantec Endpoint Protection. Installing third-party software that makes network- or system-level changes may cause undesirable results when you upgrade Symantec Endpoint Protection.
- If possible, restart client computers before installing or upgrading Symantec Endpoint Protection.
- If you are migrating to Windows 10 as well as upgrading Symantec Endpoint Protection from version 12.1.6 or earlier, you must migrate Symantec Endpoint Protection first. For more information, see Endpoint Protection Support for Windows 10.
- Symantec recommends that you upgrade the entire network to the current version of Symantec Endpoint Protection, rather than manage multiple versions.
Step 2: Back up and prepare for disaster recovery
Before you upgrade, back up the database and prepare for disaster recovery. These steps are different depending on your version:- Symantec Endpoint Protection 12.1 disaster recovery best practices
- Symantec Endpoint Protection 11.x disaster recovery best practices
Step 3: Prepare Symantec Endpoint Protection 11.x managers for migration
- Turn off replication at each site that is configured as a replication partner before you upgrade Symantec Endpoint Protection Manager.
- Disable the "Protect client files and registry keys" Application Control Policy.
If you are upgrading from Symantec Endpoint Protection 11.x and use Application and Device Control (ADC), you must disable the "Protect client files and registry keys" rule set prior to the upgrade.
After those clients have updated their policy, you can proceed with the upgrade.
Caution: If this rule set is not disabled, you may face issues at a later stage when you upgrade the clients.
- Remove client packages assigned to the client groups.
If your Symantec Endpoint Protection 11.0 site has client packages
assigned to the client groups, remove those packages. The "Maintain
existing client features when upgrading" option on the 11.0 package
causes the upgrade to remove all protection technologies from the
clients.
Step 4: Enable local authentication
If you use Symantec Network Access Control, you must enable local authentication before you upgrade Symantec Endpoint Protection Manager.Step 5: Stop the Symantec Endpoint Protection Manager service
Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the management server automatically starts the service.Caution: If you do not stop the service before you upgrade, the existing installation of Symantec Endpoint Protection Manager will become corrupted.
Step 6: Upgrade the Symantec Endpoint Protection Manager
You do not need to uninstall management servers before you install the new version. The overinstall process saves your settings, and then upgrades to the latest version.Caution: The upgrade to Symantec Endpoint Protection Manager 12.1.6 takes significantly longer than previous upgrades, if upgrading from a version older than 12.1.5. The extended length of time that the upgrade process requires is normal. Do not cancel or interrupt the installation.
Step 7: Enable replication after upgrading
After you upgrade all servers that used replication, including the servers that were configured for failover and load balancing, you must re-enable replication.To re-able replication after migration, add a replication partner in Symantec Endpoint Protection Manager.
Note: You only need to add replication partners on the computer on which you first installed the management server. Replication partners will automatically appear on the other management servers.
Step 8: Upgrade the Symantec Endpoint Protection clients
You do not need to uninstall previous clients before you install the new version. The over install process saves the client settings, and then upgrades the client to the latest version.Note: Clients that are Group Update Providers (GUPs) should be upgraded before other Symantec Endpoint Protection clients. (GUPs are not a feature of Small Business Edition.)
Review the applicable steps to prepare computers to install Symantec Endpoint Protection 12.1.x clients, and choose from one of the available methods to upgrade clients:
- Auto-Upgrade: Assign client packages to groups in the manager console, either manually or by using the Upgrade Clients with Package wizard.
For Symantec Endpoint Protection Small Business Edition clients, this occurs automatically after you upgrade the Symantec Endpoint Protection Manager. No further action is required on your part to complete the upgrade process. To disable automatic upgrades, in the console, go to the Computers page, right-click your Group, click Properties, and then check Disable Automatic Client Package Updates. - LiveUpdate – In the manager console, permit product updates through the LiveUpdate Settings policy for a client group (enterprise version only).
- Installation File - Use the installation file you download from Symantec FileConnect to upgrade the client.
- Client Deployment Wizard - Run the Client Deployment Wizard in the manager console. This wizard walks you through the creation of a client package that can be deployed via a web link and email, remote push, or saved for later local installation. In the enterprise version, you also have the option to deploy using third-party tools.
Manage Endpoint Protection licenses
Symantec licenses Symantec Endpoint Protection 12.1.x according to
the number of clients that you need to protect the endpoints at your
site. After you install the Symantec Endpoint Protection Manager, you
may immediately deploy clients.Trial and upgrade licenses expire as follows:
- New Symantec Endpoint Protection Manager installations come with a trial license; you have 60 days to purchase and activate a license that covers all of your deployed clients.
- When you migrate from an older version of Symantec Endpoint Protection (versions 11.x or 12.0), you start with an upgrade license that expires in 90 days.
- Small Business Edition comes with a 30 day trial license, whether it is an upgrade or new installation.
- In the Symantec Endpoint Protection Manager console, click Admin, and then click Licenses.
- Under Tasks, click Activate license.
- Follow the instructions in the License Activation Wizard to complete the activation process.
No comments:
Post a Comment