at the end of this lab, understand how to migrate sep 11.x...

L07-Lab Guide.

Description

Migrating to Symantec Endpoint Protection (SEP)? Want to

upgrade to the latest SEP technology? In this Lab, see how to

upgrade a multi-site Symantec Endpoint Protection environment.

You will learn how to deploy the latest technologies and

seamlessly migrate clients to SEP 12.1

At the end of this lab,

you should be able to

Understand how to Migrate SEP 11.x SEPMs to SEP

12.1

Understand how to Migrate SEP 11.x Clients to SEP

12.1

Notes

A brief presentation will introduce this lab session and

discuss key concepts.

The lab will be directed and provide you with step-by-step

walkthroughs of key features.

Feel free to follow the lab using the instructions on the

following pages. You can optionally perform this lab at

your own pace.

Be sure to ask your instructor any questions you may

have.

Thank you for coming to our lab session.

L-06 Lab Guide – Migrating to SEP 12.1

2 of 50

TABLE OF CONTENTS

L06-MIGRATING TO SEP 12.1 1

EXERCISE 1: BACKUP SITE DATABASE (OPTIONAL) 3

EXERCISE 2: DISABLE REPLICATION 6

EXERCISE 3: STOP THE SYMANTEC ENDPOINT PROTECTION MANAGER SERVICE 10

EXERCISE 4: UPGRADE 1ST SEP MANAGER (SITE 1) 11

EXERCISE 5: UPGRADE 2ND SEP MANAGER (SITE 1) 21

Exercise 5: Upgrade 2nd SEP Manager 21

EXERCISE 6 & 7: UPGRADE 3RD SEP MANAGER (SITE 2) 27

Exercise 6: Stop the Symantec Endpoint Protection Manager service 27

Exercise 7: Upgrade 3rd SEP Manager 29

EXERCISE 8 & 9: RE-ESTABLISH REPLICATION 38

Exercise 8: Re-Establish Replication (Site 1) 38

Exercise 9: Re-Establish Replication (Site 2) 45

EXERCISE 10: DEPLOYING SEP 12.1 CLIENTS (OPTIONAL) 48

Step 1: Navigate to the Client Group 48

Step 2: Select the Add a Client Install Package 48

Step 3: Select the Package to Deploy 49

Step 4: Optional Parameters 50

L-06 Lab Guide – Migrating to SEP 12.1

3 of 50

Exercise 1: Backup Site Database (Optional)

For this lab it is recommended that you skip Exercise 1 to give yourself time to

complete the full lab.

Before migrating to SEP 12.1, administrators should back up the existing database.

This Exercise take an estimated 10 minutes to Complete

Step 1: Log on to SEPM Console (SEPM1)

Username: admin

Password: symantec

Step 2: Navigate to the Servers Menu under the Admin Tab

Click the admin icon on the Left Menu Pane

L-06 Lab Guide – Migrating to SEP 12.1

4 of 50

Click Servers

Click on the DB Server under the View Servers tab.

Note: It will be listed as the 2nd SEPM1

L-06 Lab Guide – Migrating to SEP 12.1

5 of 50

Step 3: Edit Backup Settings

Under Tasks, select Edit Backup Settings

Step 4: Change Backup Server

Change the Backup Server to SEPM2, and select OK

L-06 Lab Guide – Migrating to SEP 12.1

6 of 50

Step 5: Start the Backup

Click the Back Up Site Now task

Step 6: Verify Backup has completed

After the Backup has completed, the console should display a successful backup has

completed.

Exercise 2: Disable Replication

If your site uses replication, you must disable replication before upgrading Symantec

Endpoint Protection Manager. You must disable replication at each site that replicates.

Step 1: Log on to SEPM Console on SEPM1

Username: admin

Password: symantec

L-06 Lab Guide – Migrating to SEP 12.1

7 of 50

Step 2: Navigate to the Servers Menu under the Admin Tab

Click the admin icon on the Left Menu Pane

Click Servers

L-06 Lab Guide – Migrating to SEP 12.1

8 of 50

Step 3: Navigate to Replication Partners

On the View Servers menu, expand the Local Site, and then Expand Replication Partners

Step 4: Delete each Replication Partner

Repeat these steps until all replication partners are removed

L-06 Lab Guide – Migrating to SEP 12.1

9 of 50

Step 5: Delete Replication Partners in Every Site

Repeat Steps 1-4 for Site 2 (SEPM3)

L-06 Lab Guide – Migrating to SEP 12.1

10 of 50

Exercise 3: Stop the Symantec Endpoint Protection Manager

service

Before you upgrade, you must manually stop the Symantec Endpoint Protection

Manager service on every management server in your site. After you upgrade, the

service is started automatically.

Step 1: On SEPM1, Open the Windows Services Management Tool

On the Windows Start Menu, Click All Programs, Administrative Tools, Services

Step 2: Stop the Symantec Endpoint Protection Manager Service

Scroll down to find the SEPM Service. Select the "Symantec Endpoint Protection

Manager" Service, then Select the Stop Service option.

L-06 Lab Guide – Migrating to SEP 12.1

11 of 50

The Service Status should now reflect the service not running.

Step 3: Repeat Steps 1 & 2 on each SEPM in SITE 1

Repeat Steps 1 and 2 on computer, SEPM2

Exercise 4: Upgrade 1st SEP Manager (Site 1)

Complete Exercise 4 on Server, SEPM1

Step 1: Locate SEP 12.1 Install Media

On the Desktop, Open the SEP 12.1 RU1 Media folder

L-06 Lab Guide – Migrating to SEP 12.1

12 of 50

Step 2: Open the SEPM Folder

Step 3: Run the SEPM Setup

L-06 Lab Guide – Migrating to SEP 12.1

13 of 50

Step 4: Install SEPM

Click Next

Click Next

Step 5: Accept License Agreement

Select "I Accept the terms in the License agreement" Option, and select next

L-06 Lab Guide – Migrating to SEP 12.1

14 of 50

Step 6: Supply the DB Credentials

Use the following Credentials:

Username: sa

Password: Symc4now!

Then Select, Next

L-06 Lab Guide – Migrating to SEP 12.1

15 of 50

Select Install

Step 7: Management Server and Console Installation Summary

Click Next

L-06 Lab Guide – Migrating to SEP 12.1

16 of 50

Step 8: Upgrade Wizard

Click Next

Step 9: Additional Port Settings

Click Next

L-06 Lab Guide – Migrating to SEP 12.1

17 of 50

Step 10: Additional DB Options

Click Next

Step 11: Data Collection

Click Next

L-06 Lab Guide – Migrating to SEP 12.1

18 of 50

This Step will take Approximately 3-7 Minutes to complete

Once the Upgrade has Succeeded, Select Next

L-06 Lab Guide – Migrating to SEP 12.1

19 of 50

Step 12: Upgrade is Complete

Click Finish

L-06 Lab Guide – Migrating to SEP 12.1

20 of 50

Step 13: Verify SEPM Upgrade has completed

Log On to the SEPM Console using the following credentials:

Username: admin

Password: symantec

L-06 Lab Guide – Migrating to SEP 12.1

21 of 50

Exercise 5: Upgrade 2nd SEP Manager (Site 1)

Exercise 5: Upgrade 2nd SEP Manager

Step 1: Locate SEP 12.1 Install Media on SEPM2

On the Desktop, Open the SEP 12.1 RU1 Media folder

Step 2: Open the SEPM Folder

L-06 Lab Guide – Migrating to SEP 12.1

22 of 50

Step 3: Run the SEPM Setup

Step 4: Install SEPM

L-06 Lab Guide – Migrating to SEP 12.1

23 of 50

Click Next

Click Next

Step 5: Accept License Agreement

L-06 Lab Guide – Migrating to SEP 12.1

24 of 50

Select "I Accept the terms in the License agreement" Option, and select next

Step 6: Install the Manager

Click Install

L-06 Lab Guide – Migrating to SEP 12.1

25 of 50

Click Next

Step 7: Upgrade Wizard

Click Next

Step 8: Additional Port Setup

L-06 Lab Guide – Migrating to SEP 12.1

26 of 50

Click Next

Step 9: Server Upgrade Complete

Select Next

Click Finish

L-06 Lab Guide – Migrating to SEP 12.1

27 of 50

Step 10: Verify SEPM Upgrade has completed

Log On to the SEPM Console using the following credentials:

Username: admin

Password: symantec

Exercise 6 & 7: Upgrade 3rd SEP Manager (Site 2)

Exercise 6: Stop the Symantec Endpoint Protection Manager service

Before you upgrade, you must manually stop the Symantec Endpoint Protection

Manager service on every management server in your site. After you upgrade, the

service is started automatically.

L-06 Lab Guide – Migrating to SEP 12.1

28 of 50

Step 1: On SEPM3, Open the Windows Services Management Tool

On the Windows Start Menu, Click All Programs, Administrative Tools, Services

Step 2: Stop the Symantec Endpoint Protection Manager Service

Scroll down to find the SEPM Service. Select the "Symantec Endpoint Protection

Manager" Service, then Select the Stop Service option.

L-06 Lab Guide – Migrating to SEP 12.1

29 of 50

The Service Status should now reflect the service not running.

Exercise 7: Upgrade 3rd SEP Manager

Step 1: Locate SEP 12.1 Install Media on SEPM3

On the Desktop, Open the SEP 12.1 RU1 Media folder

L-06 Lab Guide – Migrating to SEP 12.1

30 of 50

Step 2: Open the SEPM Folder

Step 3: Run the SEPM Setup

L-06 Lab Guide – Migrating to SEP 12.1

31 of 50

Step 4: Install SEPM

Click Next

NOTE: If you encounter a Low Disk Space Error, the contents of the folder "c:\Program

Files (x86)\Symantec\Symantec Endpoint Protection Manager\Inetpub\Content" can be

erased and the install can be attempted again. The contents of this folder will be

recreated after the SEPM Starts.

L-06 Lab Guide – Migrating to SEP 12.1

32 of 50

Click Next

Step 5: Accept License Agreement

Select "I Accept the terms in the License agreement" Option, and select next

L-06 Lab Guide – Migrating to SEP 12.1

33 of 50

Select Next

Step 6: Install the Manager

Click Install

L-06 Lab Guide – Migrating to SEP 12.1

34 of 50

Click Next

Step 7: Upgrade Wizard

Click Next

L-06 Lab Guide – Migrating to SEP 12.1

35 of 50

Step 8: Additional Port Setup

Click Next

Click Next

L-06 Lab Guide – Migrating to SEP 12.1

36 of 50

Click Next

Step 9: Server Upgrade Complete

Select Next

L-06 Lab Guide – Migrating to SEP 12.1

37 of 50

Click Finish

Step 10: Verify SEPM Upgrade has completed

Log On to the SEPM Console using the following credentials:

L-06 Lab Guide – Migrating to SEP 12.1

38 of 50

Username: admin

Password: symantec

Exercise 8 & 9: Re-Establish Replication

Exercise 8: Re-Establish Replication (Site 1)

Step 1: Log on to SEPM Console on SEPM1

Username: admin

Password: symantec

L-06 Lab Guide – Migrating to SEP 12.1

39 of 50

Step 2: Navigate to the Servers Menu under the Admin Tab

Click the admin icon on the Left Menu Pane

Click Servers

L-06 Lab Guide – Migrating to SEP 12.1

40 of 50

Step 3: Add Replication Partner

Select Local Site. From the Tasks Menu, select Add Existing Replication Partner

L-06 Lab Guide – Migrating to SEP 12.1

41 of 50

Select Next

Step 4: Specify Existing Site Information

L-06 Lab Guide – Migrating to SEP 12.1

42 of 50

Use the following information:

Remote Server IP Address or NAme: SEPM3

Remote Port Number: 8443

Name: admin

Password: symantec

Select Next

Step 5: Configure Replication Schedule

Click Next

L-06 Lab Guide – Migrating to SEP 12.1

43 of 50

Step 6: Configure What Data to Replicate

Uncheck “Replicate client packages” and Clieck Next

Click No

L-06 Lab Guide – Migrating to SEP 12.1

44 of 50

Step 7: Finshed

Click Finish

L-06 Lab Guide – Migrating to SEP 12.1

45 of 50

Exercise 9: Re-Establish Replication (Site 2)

Step 1: Log on to SEPM Console on SEPM3

Username: admin

Password: symantec

L-06 Lab Guide – Migrating to SEP 12.1

46 of 50

Step 2: Navigate to the Servers Menu under the Admin Tab

Click the admin icon on the Left Menu Pane, Then Select Servers on the Sub-Menu Pane

Click Servers

L-06 Lab Guide – Migrating to SEP 12.1

47 of 50

Step 3: Verify Replication Partner has been added

Select Local Site. Verify Site 1 Replication Partner has been added.

L-06 Lab Guide – Migrating to SEP 12.1

48 of 50

Exercise 10: Deploying SEP 12.1 Clients (Optional)

Step 1: Navigate to the Client Group

In the SEPM Console, navigate to the group that contains the clients you wish to

upgrade, and select the Install Packages Tab.

Step 2: Select the Add a Client Install Package

Under the tasks menu, click on the Add a Client Install Package

L-06 Lab Guide – Migrating to SEP 12.1

49 of 50

Step 3: Select the Package to Deploy

Select the Drop Down Menu

Select the SEP version 12.1.1000.157 for WIN64BIT package

L-06 Lab Guide – Migrating to SEP 12.1

50 of 50

Step 4: Optional Parameters

Specify any optional parameters including:

Times of Day to Deploy, Download Source, Notifications

Click Ok

Note: Now that the package has been assigned, the client will upgrade on the next

heartbeat or next heartbeat in the defined upgrade schedule window.

END OF EXERCISE.

Thanks for following this lab session. We hope it was useful, do not forget to fill out the

survey as indicated by the trainers.