L06: Migrating to SEP 12.1

Transcription

1 L06: Migrating to SEP 12.1 Elisha Riedlinger Technical Product Management L06: Migrating to SEP

2 At the end of this lab, you should be able to Understand how to Migrate SEP 11.x SEPMs to SEP 12.1 Understand how to Migrate SEP 11.x Clients to SEP 12.1 L06: Migrating to SEP 12.1 SYMANTEC VISION

3 WHY SEP 12.1? Unrivaled Security Blazing Performance Built for Virtual Environments Powered by Insight Real Time Behavior Monitoring with SONAR Up to 70% reduction in scan overhead Smarter Updates Faster Management Tested and optimized for virtual environments Higher VM densities Upgrading to SEP 12.1 SYMANTEC VISION

4 Things to Consider SEP 12.1 can manage SEP 12.x and SEP 11.x clients The latest release is SEP 12.1 RU1 MP1 SEP 12.1 can automatically push delta packages to upgrade older SEP clients to 12.1 SEP 12.1 has New Polices that implement Symantec Best Practices Customers may want to test the new security technologies SONAR and Insight before Enabling to minimize FPs Add Exclusions for Internal Websites Test Proprietary Applications 4

5 Additional Links 1) Symantec Endpoint Protection 12.1: Best Practices for Disaster Recovery with the SEPM 2) Best practices regarding Intrusion Prevention System technology 3) Symantec Endpoint Protection Virtualization Best Practices 4) About best practices for creating application control rules 5 ) About best practices for LiveUpdate policy settings 6) Best practices for Firewall policy settings 7) Shared Insight Cache - Best Practices and Sizing guide 8) Best Practices: Configuring a Symantec Endpoint Protection environment in a DMZ 9) Best practices when deploying Symantec Endpoint Protection client package over saturated 64k WAN links. 5

6 Overview of Migration Create a migration plan Before you begin to install the Symantec Endpoint client, manager, and any administration upgrades, you should have a solid understanding of your network topology and a streamlined plan to maximize the protection of the resources on your network during the upgrade. Symantec strongly recommends that you migrate the entire network to the current version rather than managing multiple versions of Symantec Endpoint Protection. Backup up the database Before you upgrade, you should back up the database. Disable replication If your site uses replication, you must disable replication before upgrading Symantec Endpoint Protection Manager. You must disable replication at each site that replicates. Enable local authentication If Symantec Network Access Control is in use, then enable Local Authentication prior to migration. Disable "Protect client files and registry keys" Application Control Policy If the setting "Protect client files and registry keys" is used, disable it in the Application Control policy prior to the migration. WARNING: If this setting is not disabled, you may face issues at a later stage when migrating your clients. Stop the Symantec Endpoint Protection Manager service Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically. Upgrade the Symantec Endpoint Protection Manager You do not need to uninstall management servers before you install the new version. The over install process saves legacy settings, and then upgrades to the latest version. Enabling replication after migration After you migrate all servers that used replication, including the servers that were configured for failover and load balancing, you must reenable replication. After migration, you add a replication partner to enable replication. You only need to add replication partners on the computer on which you first installed the management server. Replication partners automatically appear on the other management servers. Upgrade the Symantec Endpoint Protection Clients You do not need to uninstall previous clients before you install the new version. The over install process saves legacy settings, and then upgrades to the latest version. 6

7 Architecture for Labs SEPM1 SQL SEPM2 Site 1 W7-C1 Replication Site 2 SEPM3 Embedded 7

8 Lab Guide Overview EXERCISE 1: BACKUP SITE DATABASE (OPTIONAL) EXERCISE 2: DISABLE REPLICATION EXERCISE 3: STOP THE SYMANTEC ENDPOINT PROTECTION MANAGER SERVICES EXERCISE 4: UPGRADE 1ST SEP MANAGER (SITE 1) EXERCISE 5: UPGRADE 2ND SEP MANAGER (SITE 1) EXERCISE 6 & 7: UPGRADE 3RD SEP MANAGER (SITE 2) EXERCISE 8 & 9: RE-ESTABLISH REPLICATION EXERCISE 10: DEPLOYING SEP 12.1 CLIENTS (OPTIONAL) 8

9 Additional Information 9

10 Thank you! Copyright 2011 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice. L06: Migrating to SEP