Question/Issue:
This document describes how to migrate to Symantec Endpoint Protection 11.0 Maintenance Release 4 (MR4).
Solution:
Before you begin
This section gives the information that you need to know in order to plan for migration. This information includes supported migration paths and factors that can affect the success of the migration.
Note:
This document is meant only for migrations in which a previous version of Symantec Endpoint Protection 11.0 exists on the network or on individual computers. If no previous versions of Symantec Endpoint Protection products are already installed, please read the installation guide.
Things to know to ensure a successful migration
The following is a list of critical information that you need to know in order for your migration to succeed.
- Before you upgrade, you should back up the database. Please read "Best Practices for Disaster Recovery with Symantec Endpoint Protection" at:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007082112135948 - If your site uses replication, you must disable replication before upgrading Symantec Endpoint Protection Manager. You must disable replication at each site that replicates.
This section lists the platforms that are supported during migration to the current version of Symantec Endpoint Protection.
Supported platforms
Symantec Endpoint Protection 11.0.4000 (MR4) can migrate seamlessly over the following:
- Symantec Endpoint Protection 11.0 (RTM), 11.0.1000 (MR1), 11.0.1006 (MR1 MP1), 11.0.2000 (MR2), 11.0.2010 (MR2 MP1), 11.0.2020 (MR2 MP2), and 11.0.3001 (MR3).
- The installer package to upgrade Symantec Endpoint Protection is available from the Symantec Fileconnect site.
Migration overview
The following table gives an overview of the migration process for each component of Symantec Endpoint Protection:
| Component | Migration overview |
| Symantec Endpoint Protection Manager | When you migrate a server, the installation automatically detects and configures it appropriately. You do not need to uninstall management servers before you install the new version. The overinstall process saves legacy settings, and then upgrades to the latest version. |
| Symantec Endpoint Clients | When you migrate a client, the overinstall automatically detects the client, and migrates and installs it appropriately. You do not need to uninstall existing clients before you install the new version. |
Overview of the migration process
Migration to the current version of Symantec Endpoint Protection includes the following steps in order:
- Create a migration plan
Before you begin to install the Symantec Endpoint client, manager, and any administration upgrades, you should have a solid understanding of your network topology and a streamlined plan to maximize the protection of the resources on your network during the upgrade. Symantec strongly recommends that you migrate the entire network to the current version rather than managing multiple versions of Symantec Endpoint Protection. - Backup up the database
Before you upgrade, you should back up the database. - Disable replication
If your site uses replication, you must disable replication before upgrading Symantec Endpoint Protection Manager. You must disable replication at each site that replicates. - Stop the Symantec Endpoint Protection Manager service
Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically.
WARNING: You must stop the Symantec Endpoint Protection Manager service before you perform this procedure or you will corrupt your existing installation of Symantec Endpoint Protection Manager. - Upgrade the Symantec Endpoint Protection Manager
You do not need to uninstall management servers before you install the new version. The overinstall process saves legacy settings, and then upgrades to the latest version. - Enabling replication after migration
After you migrate all servers that used replication including the servers that were configured for failover and load balancing, you need to re-enable replication. After migration, you add a replication partner to enable replication. You only need to add replication partners on the computer on which you first installed the management server. Replication partners automatically appear on the other management servers. - Upgrade the Symantec Endpoint Protection Clients
You do not need to uninstall previous clients before you install the new version. The overinstall process saves legacy settings, and then upgrades to the latest version.
Backing up the database
Before you upgrade, you should back up the database.
- To back up the database
- Click Start > Programs > Symantec Endpoint Protection Manager > Database Back Up and Restore.
- In the Database Backup and Restore dialog box, click Back Up.
- When asked "Are you sure you want to back up the database?" click Yes.
- When you see the message "The database has been backed up successfully," click OK.
- In the Database Backup and Restore dialog box, click Exit.
Disabling replication
If your site uses replication, you must disable replication before upgrading Symantec Endpoint Protection Manager. You must disable replication at each site that replicates.
- To disable replication
- Log-on to the Symantec Endpoint Protection Manager Console.
- Click the Admin tab, then Click the blue Servers tab at the bottoms of the pane
- On the Servers tab, in the left pane, expand Local Site, and then expand Replication Partners.
- For each site that is listed under Replication Partners, right-click the site, and then click Delete.
- In the Delete Partner prompt, click Yes.
- Log-off the console, and repeat this procedure at all sites that replicate data.
Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically.
WARNING: You must stop the Symantec Endpoint Protection Manager service before you perform this procedure or you will corrupt your existing installation of Symantec Endpoint Protection Manager.
- To stop the Symantec Endpoint Protection service
- Click Start > Settings > Control Panel > Administrative Tools.
- Double Click Services to launch the Services MMC snap-in.
- In the Services window, under Name, scroll to and right-click Symantec Endpoint Protection Manager.
- Click Stop.
- Close the Services window.
- Warning: Close the Services window or your upgrade may fail.
- Repeat this procedure for all Symantec Endpoint Protection Managers.
You must upgrade all Symantec Endpoint Protection Managers on which you stopped the Symantec Endpoint Protection service.
- To upgrade Symantec Endpoint Protection Manager
- Download and unzip the maintenance release.
- Browse to the location where you unzipped the maintenance release.
- Double Click on setup.exe to start the installation.
- In the Symantec Endpoint Protection panel, click Install Symantec Endpoint Protection Manager.
- In the Install Wizard Welcome panel, click Next.
- At the License Agreement panel, select "I accept..." then click Next
- At the Ready to install the Program panel, click Install.
- In the Install Wizard Completed panel, click Finish.
- In the Upgrade Wizard Welcome panel, click Next.
- In the Information panel, click Continue.
- When the Upgrade completes, click Next.
- In the Upgrade Succeeded panel, click Finish.
Repeat the above steps on all other Symantec Endpoint Protection Managers on which you stopped the Symantec Endpoint Protection Manager service.
After you migrate all servers that used replication including the servers that were configured for failover and load balancing, you need to re-enable replication. After migration, you add a replication partner to enable replication. You only need to add replication partners on the computer on which you first installed the management server. Replication partners automatically appear on the other management servers.
- To enable replication after migration
- Log-on to the Symantec Policy Management Console if you are not logged on.
- Click the Admin tab, then click the blue Servers tab at the bottom of the pane.
- On the Servers tab, in the left pane, expand Local Site, and then click Add Replication Partner.
- In the Add Replication Partner panel, click Next.
- In the Remote Site Information panel, enter the identifying information about the replication partner, enter the authentication information, and then click Next.
- In the Schedule Replication panel, set the schedule for when replication occurs automatically, and then click Next.
- In the Replication of Log Files and Client Packages panel, check the items to replicate, and then click Next.
(Replicating packages generally involves large amounts of traffic and storage requirements.) - To complete the Add Replication Partner Wizard panel, click Finish.
- Repeat this procedure for all computers that replicate data with this computer.
The easiest way to migrate Symantec Endpoint Protection clients is by using the auto-upgrade feature. All other client software deployment methods are supported, but the auto-upgrade approach is the easiest way. The client migration installation can take up to 30 minutes. It is recommended to migrate when most users are not logged on to their computers.
Note: Test this migration approach before rolling out migration to a large number of computers. Create a new group and place a small number of client computers in that group for testing purposes.
- To migrate client software
- Log-on to the newly migrated Symantec Endpoint Protection Manager Console if you are not logged on.
- Click Admin > Install Packages.
- In the lower-left pane, under Tasks, click Upgrade Groups with Package.
- In the Welcome to the Upgrade Groups Wizard panel, click Next.
- In the Select Client Install Package panel, all existing client packages are listed in the drop down box. Select one of the following:
- Symantec Endpoint Protection
. - Symantec Network Access Control
.
- Symantec Endpoint Protection
- Click Next.
- In the Specify Groups panel, check one or more groups that contain the client computers to be migrated, then click Next.
- In the Package Upgrade Settings panel, check Download client from the management server.
- Click Upgrade Settings.
- In the Add Client Install Package dialog box, on the General tab, specify whether or not to keep existing client features or specify new ones, then configure a schedule for when to migrate the client computers. Under the Notification tab, specify a message to display to users during the migration.
- If the clients in the group run a version of Symantec Endpoint Protection previous to MR2, turn off scheduling. Scheduling is on by default when a new client install package is added to a group. If scheduling is turned on, the upgrade fails. To turn off scheduling, in the Add Client Install Package dialog box, uncheck Upgrade Schedule.
- For details about settings on these tabs, click Help.
- Click OK.
- In the Upgrade Groups Wizard dialog box, click Next.
- In the Upgrade Groups Wizard Complete panel, click Finish.
References:
Creating new Client Installation packages in the Symantec Endpoint Protection Manager Console
Release notes for Symantec Client Security 3.1.x and Symantec AntiVirus 10.1.x
Document ID: 2008121712452848
Last Modified: 12/22/2008
Date Created: 12/17/2008
Operating System(s): Windows 2000 Professional, Windows 2000 Server/Advanced Server, Windows XP Home Edition, Windows XP Professional Edition, Windows XP Tablet PC Edition, Windows Server 2003 Web/Standard/Enterprise/Datacenter Edition, Windows Vista, Windows XP Professional x64 Edition, Windows Server 2003 x64 Edition, Windows Vista x64 Edition, Windows Server 2008 DataCenter 64-bit, Windows Server 2008 DataCenter 32-bit, Windows Server 2008 Enterprise 64-bit, Windows Server 2008 Enterprise 32-bit, Windows Server 2008 Standard 64-bit, Windows Server 2008 Standard 32-bit, Windows Server 2008 Web Server 64-bit, Windows Server 2008 Web Server 32-bit
Product(s): Endpoint Protection 11
Release(s): Endpoint Protection 11 [All Releases]
No comments:
Post a Comment