UP L12: Still on SEP 11? Let us show you how to simplify migration to SEP.

Transcription

1 UP L12: Still on SEP 11? Let us show you how to simplify migration to SEP. Description Migrating to Symantec Endpoint Protection (SEP)? Want to upgrade to the latest SEP technology? In this Lab, see how to upgrade a multi-site Symantec Endpoint Protection environment. You will learn how to deploy the latest technologies and seamlessly migrate clients to SEP RU2 At the end of this lab, you should be able to Understand how to Migrate SEP 11.x SEPMs to SEP 12.1-RU2 Understand how to Migrate SEP 11.x Clients to SEP 12.1-RU2 Notes A brief presentation will introduce this lab session and discuss key concepts. The lab will be directed and provide you with step-bystep walkthroughs of key features. Feel free to follow the lab using the instructions on the following pages. You can optionally perform this lab at your own pace. Be sure to ask your instructor any questions you may have. Thank you for coming to our lab session. L07- Lab Guide.

2 TABLE OF CONTENTS L06- MIGRATING TO SEP RU2 1 EXERCISE 1: BACKUP SITE DATABASE (OPTIONAL) 3 EXERCISE 2: DISABLE REPLICATION 5 EXERCISE 3: STOP THE SYMANTEC ENDPOINT PROTECTION MANAGER SERVICE 9 EXERCISE 4: UPGRADE 1ST SEP MANAGER (SITE 1) 11 EXERCISE 5: UPGRADE 2ND SEP MANAGER (SITE 1) ERROR! BOOKMARK NOT DEFINED. EXERCISE 6 & 7: UPGRADE 3RD SEP MANAGER (SITE 2) 21 Exercise 6: Stop the Symantec Endpoint Protection Manager service 21 Exercise 7: Upgrade 3rd SEP Manager 23 EXERCISE 8 & 9: RE- ESTABLISH REPLICATION 32 Exercise 8: Re- Establish Replication (Site 1) 32 Exercise 9: Re- Establish Replication (Site 2) 39 EXERCISE 10: DEPLOYING SEP RU2 CLIENTS (OPTIONAL) 41 2 of 43

3 Exercise 1: Backup Site Database (Optional) Before migrating to SEP RU2, administrators should back up the existing database. This Exercise take an estimated 10 minutes to Complete Step 1: Log on to SEPM Console (SEPM1) Username: admin Password: Symc4now Step 2: Navigate to the Servers Menu under the Admin Tab Click the admin icon on the Left Menu Pane 3 of 43

4 Click Servers and then click on the DB Server under the View Servers tab. Step 3: Start the Backup Click the Back Up Site Now task Step 6: Verify Backup has completed After the Backup has completed, the console should display a successful backup has completed. Exercise 1b: Run DValidator (Optional) Start a command prompt or double click the batch file under the Tools folder located in the installed SEPM directory 4 of 43

5 Run dbvalidator. Navigate to tomcat/logs/ Open dbvalidator file (no extension). Success is validation passed If there are ay broken links or any other failures the upgrade process will not be succesfull. Exercise 2: Disable Replication If your site uses replication, you must disable replication before upgrading Symantec Endpoint Protection Manager. You must disable replication at each site that replicates. 5 of 43

6 Step 1: Log on to SEPM Console on SEPM1 Username: admin Password: Symc4now Step 2: Navigate to the Servers Menu under the Admin Tab Click the admin icon on the Left Menu Pane 6 of 43

7 Click Servers Step 3: Navigate to Replication Partners On the View Servers menu, expand the Local Site, and then Expand Replication Partners 7 of 43

8 Step 4: Delete Replication Partner in each site (Site 1 and Site 2). Logged into Site1 (SPEM1) and deleting Site 2 8 of 43

9 Step 5: Delete Replication Partner in each site: Logged into Site 2 (SEPM3) and deleting Site 1 Exercise 3: Stop the Symantec Endpoint Protection Manager service Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically. 9 of 43

10 Step 1: On SEPM1, Open the Windows Services Management Tool On the Windows Start Menu, Click All Programs, Administrative Tools, Services Step 2: Stop the Symantec Endpoint Protection Manager Service Scroll down to find the SEPM Service. Select the "Symantec Endpoint Protection Manager" Service, then Select the Stop Service option. The Service Status should now reflect the service not running. 10 of 43

11 Step 3: Repeat Steps 1 & 2 on each SEPM in SITE 1 Exercise 4: Upgrade 1st SEP Manager (Site 1) Complete Exercise 4 on Server, SEPM1 Step 1: Locate SEP RU2 Install Media On the Desktop, Open the SEP RU2 11 of 43

12 Step 2: Open the SEPM Folder Step 3: Run the SEPM Setup 12 of 43

13 Step 4: Install SEPM Click Next Click Next Step 5: Accept License Agreement Select "I Accept the terms in the License agreement" Option, and select next 13 of 43

14 Step 6: If using SQL, you must supply the DB Credentials. This lab uses the embedded database so no credentials need to be added here. Click Next Select Install 14 of 43

15 Step 7: Management Server and Console Installation Summary Click Next Step 8: Upgrade Wizard Click Next 15 of 43

16 Step 9: Additional Port Settings Click Next Step 10: Additional DB Options Click Next Note: If your organization currently runs database maintenance tasks directly on SQL server you should uncheck these database maintenance tasks. 16 of 43

17 Step 11: Data Collection Click Next This Step will take Approximately 3-7 Minutes to complete 17 of 43

18 Once the Upgrade has Succeeded, Select Next 18 of 43

19 Step 12: Upgrade is Complete Click Finish 19 of 43

20 Step 13: Verify SEPM Upgrade has completed Log On to the SEPM Console using the following credentials: Username: admin Password: Symc4now 20 of 43

21 Exercise 5 and 6: Upgrade SEP Manager on remote site (Site 2 named: SEPM3 ) Exercise 5: Stop the Symantec Endpoint Protection Manager service Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically. Step 1: On SEPM3, Open the Windows Services Management Tool Right- click My Computer and select Manage 21 of 43

22 Step 2: Stop the Symantec Endpoint Protection Manager Service Scroll down to find the SEPM Service. Select the "Symantec Endpoint Protection Manager" Service, then Select the Stop button. The Service Status should now reflect the service not running. 22 of 43

23 Exercise 6: Upgrade 2nd SEP Manager Step 1: Locate SEP RU2 Install Media on SEPM2 On the Desktop, Open the SEP RU2.2 folder 23 of 43

24 Step 2: Open the SEPM Folder Step 3: Run the SEPM Setup 24 of 43

25 Step 4: Install SEPM Click Next NOTE: If you encounter a Low Disk Space Error, the contents of the folder "c:\program Files (x86)\symantec\symantec Endpoint Protection Manager\Inetpub\Content" can be erased and the install can be attempted again. The contents of this folder will be recreated after the SEPM Starts. 25 of 43

26 Click Next Step 5: Accept License Agreement Select "I Accept the terms in the License agreement" Option, and select next 26 of 43

27 Select Next Step 6: Install the Manager Click Install 27 of 43

28 Click Next Step 7: Upgrade Wizard Click Next 28 of 43

29 Step 8: Additional Port Setup Click Next Click Next 29 of 43

30 Click Next Step 9: Server Upgrade Complete 30 of 43

31 Select Next Click Finish Step 10: Verify SEPM Upgrade has completed 31 of 43

32 Log On to the SEPM Console using the following credentials: Username: admin Password: Symc4now Exercise 7 & 8: Re- Establish Replication Exercise 7: Re- Establish Replication (Site 1) Step 1: Log on to SEPM Console on SEPM1 Username: admin Password: Symc4now 32 of 43

33 Step 2: Navigate to the Servers Menu under the Admin Tab Click the admin icon on the Left Menu Pane 33 of 43

34 Step 3: Add Replication Partner Select Local Site. From the Tasks Menu, select Add Existing Replication Partner 34 of 43

35 Select Next Step 4: Specify Existing Site Information 35 of 43

36 Use the following information: Remote Server IP Address or Name: SEPM2 Remote Port Number: 8443 Name: admin Password: Symc4now Select Next Step 5: Configure Replication Schedule Click Next 36 of 43

37 Step 6: Configure What Data to Replicate Click Next Click No 37 of 43

38 Step 7: Finshed Click Finish 38 of 43

39 Exercise 9: Re- Establish Replication (Site 2) Step 1: Log on to SEPM Console on SEPM2 Username: admin Password: Symc4now 39 of 43

40 Step 2: Navigate to the Servers Menu under the Admin Tab Click the admin icon on the Left Menu Pane, Then Select Servers on the Sub- Menu Pane Step 3: Verify Replication Partner has been added Select Local Site. Verify the Replication Partner has been added. 40 of 43

41 Exercise 10: Deploying SEP RU2 Clients (Optional) Step 1: Navigate to the Client Group In the SEPM Console, navigate to the group that contains the clients you wish to upgrade, and select the Install Packages Tab. Step 2: Select the Add a Client Install Package Under the tasks menu, click on the Add a Client Install Package 41 of 43

42 Step 3: Select the Package to Deploy Select the Drop Down Menu Select the SEP version for WIN64BIT package Step 4: Optional Parameters Specify any optional parameters including: 42 of 43

43 Times of Day to Deploy, Download Source, Notifications Click Ok Note: Now that the package has been assigned, the client will upgrade on the next heartbeat or next heartbeat in the defined upgrade schedule window. END OF EXERCISE. Thanks for following this lab session. We hope it was useful, do not forget to fill out the survey as indicated by the trainers. 43 of 43