IS L02-MIGRATING TO SEP 12.1 Description Migrating to Symantec Endpoint Protection (SEP)? Want to upgrade to the latest SEP technology? In this Lab, see how to upgrade a multi-site Symantec Endpoint Protection environment. You will learn how to deploy the latest technologies and seamlessly migrate clients to SEP 12.1 At the end of this lab, you should be able to Understand how to Migrate SEP 11.x SEPMs to SEP 12.1 Understand how to Migrate SEP 11.x Clients to SEP 12.1 Notes A brief presentation will introduce this lab session and discuss key concepts. The lab will be directed and provide you with step-by-step walkthroughs of key features. Feel free to follow the lab using the instructions on the following pages. You can optionally perform this lab at your own pace. Be sure to ask your instructor any questions you may have. Thank you for coming to our lab session. IS L02 Lab Guide Migrating to SEP 12.1
TABLE OF CONTENTS L06-MIGRATING TO SEP 12.1 1 EXERCISE 1: BACKUP SITE DATABASE (OPTIONAL) 3 EXERCISE 2: DISABLE REPLICATION 5 EXERCISE 3: STOP THE SYMANTEC ENDPOINT PROTECTION MANAGER SERVICE 8 EXERCISE 4: UPGRADE 1ST SEP MANAGER (SITE 1) 10 EXERCISE 5 AND 6: UPGRADE SEP MANAGER ON REMOTE SITE: 19 EXERCISE 7 & 8: RE-ESTABLISH REPLICATION 30 EXERCISE 10: DEPLOYING SEP 12.1 CLIENTS (OPTIONAL) 39 2 of 41
Exercise 1: Backup Site Database (Optional) Before migrating to SEP 12.1, administrators should back up the existing database. This Exercise take an estimated 10 minutes to Complete Step 1: Log on to SEPM Console (SEPM1) Username: admin Password: Symc4now Step 2: Navigate to the Servers Menu under the Admin Tab Click the admin icon on the Left Menu Pane 3 of 41
Click Servers and then click on the DB Server under the View Servers tab. Step 3: Start the Backup Click the Back Up Site Now task Step 6: Verify Backup has completed After the Backup has completed, the console should display a successful backup has completed. 4 of 41
Exercise 2: Disable Replication If your site uses replication, you must disable replication before upgrading Symantec Endpoint Protection Manager. You must disable replication at each site that replicates. Step 1: Log on to SEPM Console on SEPM1 Username: admin Password: Symc4now Step 2: Navigate to the Servers Menu under the Admin Tab Click the admin icon on the Left Menu Pane 5 of 41
Click Servers Step 3: Navigate to Replication Partners On the View Servers menu, expand the Local Site, and then Expand Replication Partners 6 of 41
Step 4: Delete Replication Partner on each SEPM in each site: SEPM1 seen here. Step 5: Do the same steps on SEPM2 as shown here: 7 of 41
Exercise 3: Stop the Symantec Endpoint Protection Manager service Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically. Step 1: On SEPM1, Open the Windows Services Management Tool On the Windows Start Menu, Click All Programs, Administrative Tools, Services 8 of 41
Step 2: Stop the Symantec Endpoint Protection Manager Service Scroll down to find the SEPM Service. Select the "Symantec Endpoint Protection Manager" Service, then Select the Stop Service option. The Service Status should now reflect the service not running. Step 3: Repeat Steps 1 & 2 on each SEPM in the site if there are additional SEPMs 9 of 41
Exercise 4: Upgrade 1st SEP Manager (Site 1) Complete Exercise 4 on Server, SEPM1 Step 1: Locate SEP 12.1 Install Media On the Desktop, Open the SEP 12.1.2 folder 10 of 41
Step 2: Open the SEPM Folder Step 3: Run the SEPM Setup 11 of 41
Step 4: Install SEPM Click Next Click Next Step 5: Accept License Agreement Select "I Accept the terms in the License agreement" Option, and select next 12 of 41
Step 6: If using SQL, you must supply the DB Credentials. This lab uses the embedded database so no credentials need to be added here. Click Next Select Install 13 of 41
Step 7: Management Server and Console Installation Summary Click Next Step 8: Upgrade Wizard Click Next 14 of 41
Step 9: Additional Port Settings Click Next Step 10: Additional DB Options Click Next Note: If your organization currently runs database maintenance tasks directly on SQL server you should uncheck these database maintenance tasks. 15 of 41
Step 11: Data Collection Click Next This Step will take Approximately 3-7 Minutes to complete 16 of 41
Once the Upgrade has Succeeded, Select Next Step 12: Upgrade is Complete Click Finish 17 of 41
Step 13: Verify SEPM Upgrade has completed Log On to the SEPM Console using the following credentials: Username: admin Password: Symc4now 18 of 41
Exercise 5 and 6: Upgrade SEP Manager on remote site: Exercise 5: Stop the Symantec Endpoint Protection Manager service Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically. Step 1: On SEPM2, Open the Windows Services Management Tool Right-click My Computer and select Manage 19 of 41
Step 2: Stop the Symantec Endpoint Protection Manager Service Scroll down to find the SEPM Service. Select the "Symantec Endpoint Protection Manager" Service, then Select the Stop button. The Service Status should now reflect the service not running. 20 of 41
Exercise 6: Upgrade 2nd SEP Manager Step 1: Locate SEP 12.1 Install Media on SEPM2 On the Desktop, Open the SEP 12.1.2 folder Step 2: Open the SEPM Folder 21 of 41
Step 3: Run the SEPM Setup Step 4: Install SEPM Click Next 22 of 41
NOTE: If you encounter a Low Disk Space Error, the contents of the folder "c:\program Files (x86)\symantec\symantec Endpoint Protection Manager\Inetpub\Content" can be erased and the install can be attempted again. The contents of this folder will be recreated after the SEPM Starts. Click Next 23 of 41
Step 5: Accept License Agreement Select "I Accept the terms in the License agreement" Option, and select next Select Next 24 of 41
Step 6: Install the Manager Click Install Click Next 25 of 41
Step 7: Upgrade Wizard Click Next Step 8: Additional Port Setup 26 of 41
Click Next Click Next Click Next 27 of 41
Step 9: Server Upgrade Complete Select Next Click Finish 28 of 41
Step 10: Verify SEPM Upgrade has completed Log On to the SEPM Console using the following credentials: Username: admin Password: Symc4now 29 of 41
Exercise 7 & 8: Re-Establish Replication Exercise 7: Re-Establish Replication (Site 1) Step 1: Log on to SEPM Console on SEPM1 Username: admin Password: Symc4now 30 of 41
Step 2: Navigate to the Servers Menu under the Admin Tab Click the admin icon on the Left Menu Pane 31 of 41
Step 3: Add Replication Partner Select Local Site. From the Tasks Menu, select Add Existing Replication Partner 32 of 41
Select Next Step 4: Specify Existing Site Information 33 of 41
Use the following information: Remote Server IP Address or Name: SEPM2 Remote Port Number: 8443 Name: admin Password: Symc4now Select Next Step 5: Configure Replication Schedule Click Next 34 of 41
Step 6: Configure What Data to Replicate Click Next Click No 35 of 41
Step 7: Finshed Click Finish 36 of 41
Exercise 8: Re-Establish Replication (Site 2) Step 1: Log on to SEPM Console on SEPM2 Username: admin Password: Symc4now 37 of 41
Step 2: Navigate to the Servers Menu under the Admin Tab Click the admin icon on the Left Menu Pane, Then Select Servers on the Sub-Menu Pane Step 3: Verify Replication Partner has been added Select Local Site. Verify the Replication Partner has been added. 38 of 41
Exercise 9: Deploying SEP 12.1 Clients (Optional) Step 1: Navigate to the Client Group In the SEPM Console, navigate to the group that contains the clients you wish to upgrade, and select the Install Packages Tab. Step 2: Select the Add a Client Install Package Under the tasks menu, click on the Add a Client Install Package 39 of 41
Step 3: Select the Package to Deploy Select the Drop Down Menu Select the SEP version 12.1.1000.157 for WIN64BIT package 40 of 41
Step 4: Optional Parameters Specify any optional parameters including: Times of Day to Deploy, Download Source, Notifications Click Ok Note: Now that the package has been assigned, the client will upgrade on the next heartbeat or next heartbeat in the defined upgrade schedule window. END OF EXERCISE. Thanks for following this lab session. We hope it was useful, do not forget to fill out the survey as indicated by the trainers. 41 of 41