Migrating to Symantec Endpoint Protection 11.0 MR1
Question/Issue:
How to migrate to Symantec Endpoint Protection 11.0 MR1
Solution:
Before you begin
This section gives the information that you need to plan the migration. This information includes the supported migration paths, and factors that can affect the success of the migration.
Note:
This document is meant only for migrations in which a previous version of Symantec Endpoint Protection 11.0 exists on the network or on individual computers. If no previous versions of Symantec Endpoint Protection products are already installed, read the installation guide.
Things to know to ensure a successful migration
The following is a list of critical information that you need to know in order for your migration to succeed.
- You must stop the Symantec Endpoint Protection Manager service before you perform this procedure or you will corrupt your existing installation of Symantec Endpoint Protection Manager.
- Back up the database before you upgrade.
- If your site uses replication, you must disable the replication service before upgrading the Symantec Endpoint Protection Manager. You must disable the replication at each site that replicates.
Migration paths
This section lists the platforms that are supported during migration to the current version of Symantec Endpoint Protection.
Supported platforms
Symantec Endpoint Protection MR1 can migrate seamlessly over the following product:
- Symantec Endpoint Protection 11.0
Downloading the Maintenance Release
Overview of the migration process
Migration to the current version of Symantec Endpoint Protection includes the following steps:
- Create a migration plan
Before you begin to install the Symantec Endpoint Manager client and any administration upgrades, you must have a solid understanding of your network topology and a streamlined plan to maximize the protection of the resources on your network during the upgrade. Symantec strongly recommends that you migrate the entire network to the current version rather than managing multiple versions of Symantec Endpoint Protection.
- Back up the database
Back up the database before you upgrade.
- Disable replication
If your site uses replication, you must disable the replication service before upgrading the Symantec Endpoint Protection Manager. You must disable the replication at each site that replicates.
- Stop the Symantec Endpoint Protection Manager service
Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After the upgrade is complete, the service is started again automatically.
WARNING: You must stop the Symantec Endpoint Protection Manager service before you perform this procedure or you will corrupt your existing installation of the Symantec Endpoint Protection Manager.
- Upgrade the Symantec Endpoint Protection Manager
You do not need to uninstall the management servers before you install the new version. The over-install process saves the legacy settings and then upgrades them to the latest version.
- Enabling replication after migration
After you migrate all of the servers that used replication including the servers that were configured for failover and load balancing, you need to enable replication. After migration, add a replication partner to enable replication. You only need to add replication partners on the computer on which you first installed the management server. Replication partners automatically appear on the other management servers.
- Upgrade the Symantec Endpoint Protection Clients
You do not need to uninstall previous clients before you install the new version. The over-install process saves legacy settings, and then upgrades to the latest version.
Backing up the database
Back up the database before upgrading.
To back up the database
- Click Start> Programs> Symantec Endpoint Protection Manager> Database Back Up and Restore.
- In the "Database Back up and Restore" dialog box, click Back Up.
- When asked "Are you sure you want to back up the database?" click Yes.
- When you see the message "The database has been backed up successfully," click OK.
- In the "Database Back up and Restore" dialog box, click Exit.
Disabling replication
If your site uses replication, you must disable the replication service before upgrading the Symantec Endpoint Protection Manager. You must disable the replication service at each site that replicates.
To disable replication
- Log on to the Symantec Endpoint Protection Manager Console.
- Click Admin> Servers
- Expand Local Site and click Add Replication Partner.
- For each site that is listed under the "Replication Partners", right-click the site and click Delete.
- In the "Delete Partner" prompt, click Yes.
- Log off the console, and repeat this procedure at all sites that replicate data.
Stopping the Symantec Endpoint Protection Manager service
Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically.
WARNING: You must stop the Symantec Endpoint Protection Manager service before you perform this procedure or you will corrupt your existing installation of Symantec Endpoint Protection Manager.
To stop the Symantec Endpoint Protection service
- Click Start> Settings> Control Panel> Administrative Tools
- Double-click Services to launch the "Services MMC" snap-in.
- In the "Services" window, under "Name", scroll to and right-click Symantec Endpoint Protection Manager.
- Click Stop.
- Close the "Services" window.
Warning: Close the Services window or your upgrade may fail.
- Repeat this procedure for all of the Symantec Endpoint Protection Managers.
Upgrading the Symantec Endpoint Protection Manager
You must upgrade all of the Symantec Endpoint Protection Managers on which you stopped the Symantec Endpoint Protection service.
To upgrade the Symantec Endpoint Protection Manager
- Download and unzip the maintenance release.
- Browse to the location where you unzipped the maintenance release.
- Double-click on setup.exe to start the installation
- In the Symantec Endpoint Protection panel, click Install Symantec Endpoint Protection> Symantec Endpoint Protection Manager.
- In the "Install Wizard Welcome" panel, click Next.
- In the "License Agreement" panel, select "I accept..." and click Next
- In the "Ready to install the Program" panel, click Install
- In the "Install Wizard Completed" panel, click Finish.
- In the "Upgrade Wizard Welcome" panel, click Next.
- In the "Information" panel, click Continue.
- When the Upgrade completes, click Next.
- In the "Upgrade Succeeded" panel, click Finish.
- Repeat the above steps on all other Symantec Endpoint Protection Managers on which you stopped the Symantec Endpoint Protection Manager service.
Enabling replication after migration
After you migrate all of the servers that used the replication process including the servers that were configured for failover and load balancing, you need to enable replication. After migration, add a replication partner to enable replication. You only need to add replication partners on the computer on which you first installed the management server. Replication partners automatically appear on the other management servers.
To enable replication after migration
- Log on to the Symantec Policy Management Console if you are not logged on.
- Click Admin> Servers
- Expand Local Site and click Add Replication Partner.
- In the "Add Replication Partner" panel, click Next.
- In the "Remote Site Information" panel, enter the identifying information about the replication partner, enter the authentication information and click Next.
- In the "Schedule Replication" panel, set the schedule for replication to occur automatically and click Next.
- In the "Replication of Log Files and Client Packages" panel, check the items to replicate and click Next.
Note: Replicating packages generally involves large amounts of traffic and storage requirements.
- In the "Completing the Add Replication Partner Wizard" panel, click Finish.
- Repeat this procedure for all computers that replicate data with this computer.
Upgrading the Symantec Endpoint Protection clients
The easiest way to migrate the Symantec Endpoint Protection clients is by using the auto-upgrade feature. All other client software deployment methods are supported, but the auto-upgrade approach is the best method. The client migration installation can take up to 30 minutes. Therefore, you should migrate when most users are not logged on to their computers.
Note: Test the migration approach before rolling out migration to a large number of computers. You can create a new group and place a small number of client computers in that group for testing purposes.
To migrate client software
- Log on to the newly migrated Symantec Endpoint Protection Manager Console if you are not logged on.
- Click Admin> Install Packages.
- Under "Tasks", click Upgrade Groups with Package.
- In the "Welcome to the Upgrade Groups Wizard" panel, click Next.
- In the "Select Client Install Package" panel, all existing client packages are listed in the drop-down menu. Select one of the following:
Symantec Endpoint Protection <appropriate version>.
Symantec Network Access Control <appropriate version>.
- Click Next.
- In the "Specify Groups" panel, check one or more groups that contains the client computers that you want to migrate, and then click Next.
- In the "Package Upgrade Settings" panel, check Download client from the management server.
- Click Upgrade Settings.
- In the "Add Client Install Package" dialog box, on the "General" tab, specify whether or not you want to keep existing client features or create new ones. Then configure a schedule for when to migrate the client computers. Under the "Notification" tab, can specify a message to display to users during the migration.
- Upgrade clients to Maintenance Release 1 by adding a new client install package to a group.
Note: If the clients in the group run a previous version of Symantec Endpoint Protection turn off scheduling. Scheduling is on by default when a new client install package is schedules to be sent to a group. If scheduling is turned on, the upgrade fails. To turn off scheduling, go to the "Add Client Install Package" dialog box and uncheck Upgrade Schedule.
- For details about settings on these tabs, click Help.
- Click OK.
- In the "Upgrade Groups Wizard" dialog box, click Next.
- In the "Upgrade Groups Wizard Complete" panel, click Finish.
References:
"Creating new Client Installation packages in the Symantec Endpoint Protection Manager Console" at:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007072016360948
This document is available in the following languages:
Document ID: 2007122711551348
Last Modified: 08/19/2008
Date Created: 12/27/2007
Operating System(s): Windows 2000 Professional, Windows 2000 Server/Advanced Server, Windows XP Professional Edition, Windows Server 2003 Web/Standard/Enterprise/Datacenter Edition, Windows Vista, Windows XP Professional x64 Edition, Windows Server 2003 x64 Edition, Windows Vista x64 Edition
Product(s): Endpoint Protection 11
Release(s): Endpoint Protection 11 [All Releases], Endpoint Protection 11.0, Endpoint Protection 11.0.1
Cart
PRINT THIS PAGE