Upgrading To SEP 14 – What You Need To Know

Blog Feature Image: 

ThinkstockPhotos-472305908.jpg

Symantec Endpoint Protection 14 is now available!  Take advantage of it to stop threats regardless of how they attack your endpoint; so you can focus on your business. Uniquely tiered protection combines artificial intelligence powered by advanced machine learning and essential technologies to deliver superior protection across all points of attack.  The SEP console makes management and integration with existing security infrastructure possible, orchestrating response workflows to quickly stop the threat and the spread of infection and enabling complimentary solutions.  The lightweight single agent merges multiple next-gen technologies such as exploit prevention and Endpoint Detection and Response (EDR) to reduce endpoint complexity, IT burden, and lower total cost of ownership; without compromising end-user productivity.

The upgrade to SEP 14 is easy and straightforward.  To discuss it I’ll break the process into three stages:

1. Preparing for a Successful Install
2. Downloading SEP 14 and
3. The Upgrade Process

Before we get started let’s look at the possible upgrade paths.

If you are on a Symantec Endpoint Protection Management (SEPM) Console version 12.x or later you can upgrade directly to SEP 14.  In the case of SEPM 11 consoles, best practice is to bring up a new SEPM 14 and upgrade clients to SEP 14 from that console.  However, if desired you can upgrade to SEPM 12.x first then to 14. 

The SEP client, on the other hand, can be upgraded directly from 11.x or 12.x to 14.0.

Ensure the minimum system requirements are met for the platform and that the upgrade can be performed from that version of the client or SEPM before you attempt to upgrade to version 14. For example, for versions of the Mac client earlier than 12.1.4, you must either uninstall those versions or upgrade them first to a client version later than 12.1.4, before attempting the upgrade to 14.  For SEPM 

or clients on Windows XP platforms you cannot upgrade to 14 – they are no longer supported.  In the case of the SEP 12.x client on Windows XP; the SEPM 14 can manage these computers as legacy 12.x clients.

If you have performed upgrades to SEP in the past the process is as simple as 1, 2, 3 (see the SEP 14 Migration page):

1. Verify the System Requirements
2. Review Best Practices, the security administrator’s #1 resource for migration
3. Download Endpoint Protection 14 and start managing 12, 14, Windows, Mac, embedded systems, and virtual machines from a single console.

However, if you are new to the upgrade process or simply wish more details then read on…

Preparing for a Successful Install:

• Review Release Notes and Systems Requirements
   
• Be prepared – download the Symantec Help SymDiag diagnostic tool to determine whether the computers meet minimum system requirements. It can also gather data for support assisted troubleshooting and providing links to other customer self-help and support resources.
   
• If you are migrating to Windows 10 as well as upgrading Symantec Endpoint Protection from version 12.1.6 or earlier, you must migrate Symantec Endpoint Protection first – learn more
   
• Symantec recommends that you upgrade the entire network to the current version of Symantec Endpoint Protection, rather than manage multiple versions.
   
• To generate a list of SEP versions in your environment run a report from the SEPM

Downloading SEP 14:

• Review Best Practices, the Administrators #1 resource for your SEP 14 upgrade
   
  • Ensure the proper exclusions have been made to any peripheral firewall or proxy to ensure successful communication with all Symantec servers
     
  • Even trusted web domains may need to be excluded from scans – review all possible scan exclusions for your environment before you upgrade your clients

• Look over the Guide to Endpoint Protection Files on FileConnect before you download
   
• Read the FAQ for additional information.  Customers with a valid support contract can download from FileConnect using their product serial number, which begins with an M. 

The Upgrade Process:

Read the Tech Brief for step-by-step upgrade instructions.  It is not necessary to uninstall your client software before beginning the upgrade.  Be sure to perform your upgrade in the following order: SEPM first, then clients that are Group Update Providers (GUPs), followed by the remaining clients.

• Step 1: Create an upgrade plan
   
• Step 2: Back up and prepare for disaster recovery (critical)
   
• Step 3: Prepare Symantec Endpoint Protection 11.x managers
  • Disable replication
     
  • Disable the "Protect client files and registry keys" Application Control Policy
     
  • Remove client packages assigned to the client groups

• Step 4: Stop the Symantec Endpoint Protection Manager service
   
• Step 5: Upgrade the Symantec Endpoint Protection Manager
  • You install the new version over the existing version. The over install process saves your settings and then upgrades to the latest version.
     
• Step 6: Upgrade the Symantec Endpoint Protection clients
  • You do not need to uninstall previous clients before you install the new version.  The over install process saves the client settings and then upgrades the client to the latest version.  Note: Clients that are Group Update Providers (GUPs) should be upgraded before other Endpoint Production clients.

• Read the How-To Article if you need to renew or activate new/additional licenses

Getting Help:

• Don’t have a serial number: visit the Symantec Licensing portal or contact Customer Care at 1-800-721-3934.
   
• If the .zip file fails to execute or the download doesn’t complete search the Customer Support  database or contact Customer Care at 1-800-721-3934 or via email where available.
   
• If you need help getting started use the Getting Started Guide.  Under the Manage tab you can get connected by joining Symantec Connect or educate yourself with hundreds of free on-demand training classes.

It’s important to keep maintenance current. Valid maintenance ensures continuous security protection, so that you are eligible to access critical security updates and other benefits, and to remain compliant.   The Manage tab in the Getting Started Guide provides licensing and maintenance information.