Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


Upgrade to SEP 12.1.4 from 11.x

Posted on 2014-03-16
Medium Priority
Last Modified: 2014-03-26

Just putting together a plan for upgrading our Symantec Endpoint Protection v12.1.4 from 11.x and wondering when/how do we upgrade our client install package we've created?  These are the different package we created for our desktops,  64_bit servers and 32_bit_servers. They're stored on another volume from the main SEP install in the mgmt server and I can't find mention how packages are upgraded.

Also, can someone confirm that exclusions we've set on individual servers are kept post pushing out the upgrade from mgmt server

Question by:kswan_expert
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 79

Expert Comment

ID: 39934075
You can upgrade using the SEP management console, under the group structure, replace the existing SEP install packages (the three client packages that are added when SEP 12.x are installed) with the new version.  During the addition of the new package, make sure your options are to use the same settings that exist on the client.  Then you have the option to deal with the scheduling of the install as well as the notification process to the user when an update is about to be performed.

The client when checking with the SEP central system/s will over the period of the scheduled upgrade download the.
These require managed clients.

The other option is to use GPO to push the packages, you would however had to have  used the .msi rather than the .exe package type.
LVL 97

Expert Comment

by:John Hurst
ID: 39934089
I had been running V12.1.4 quite well on both Windows 7 and Windows 8.1. I have not worked out exactly why, but the upgrade to V12.1.4a required uninstalling V12.1.4 after a failed upgrade.

So you might consider uninstalling v11 on your server and then installing V12.1.4a. Then try try pushing that out to a few clients and make sure it works. That will guide your later strategy and steps.
LVL 79

Accepted Solution

arnold earned 1000 total points
ID: 39934108
You do not need to uninstall v11 (went through this process), you need to make sure to get the v11 to the 11.07MP4a 11.0.7400.1398.  This will update the DB to a point that the sepv12.1.4a can upgrade without uninstall.

The only annoying thing is that the sepv12 checks and periodically detects some "change in system (application install/some update/...." at which point you can go no further.  You would need to reboot the system onto which you want to install the management portion until it is "clear" for the update to go through.
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

LVL 64

Assisted Solution

btan earned 1000 total points
ID: 39934202
understand that Symantec sends you client installation package updates, and then you add them to the Symantec Endpoint Protection database to distribute them from the SEPM. In your case, you export the packages from the client and note that it should have an installation package (that you can import later) consists of two files. One file is named product_name.dat, and the other file is named

When you export packages, you must browse to a directory to contain the exported packages. That folder should have the files needed, note that the export process creates descriptively named subdirectories in this directory and places the installation files in these subdirectories.

These is an overview for handling the client upgrade.

Next for the upgrade via autoupgrade (which is recommended), there is caution note and besides that I see the rule set and exception should be ported over as well as included in the installation package files. Due to possible bandwidth concerns, it is best to schedule AutoUpgrade for after hours.

Enterprise versions of SEP 11.0.x or 12.1.x cannot be upgraded to the Small Business Edition of 12.1.x.

If you upgrade from 11.x and use Application and Device Control, you must disable the Application Control rule "Protect client files and registry keys." After the clients receive the new policy, you may upgrade using AutoUpgrade.

As a whole, when you upgrade a client, the "overinstall" automatically detects the client, and upgrades and installs it appropriately. You do not need to uninstall existing clients before you install the new version.
LVL 64

Expert Comment

ID: 39934217

Author Comment

ID: 39935668
Thanks for the answers guys, appreciate it.

Arnold - we're on version 11.0.5002.333 and i'd not read that we need to upgrade to 11.07MP4a.   In the upgrade guides it states you can upgrade seamlessly from 11.x. Can you expand on this or post a link?

LVL 79

Expert Comment

ID: 39935792
I was keeping and was at a level where it was an issue.
the setup also uses ms sql as the backend.

Out of abundance of caution when possible, bring the version as close to current before going to new major version.

When you run the installer, it will validate and will let you know if it can not proceed.
LVL 64

Expert Comment

ID: 39935798
in case this help, I saw the migration paths for Symantec Endpoint Protection Manager (SEPM) 11.x to Symantec Endpoint Protection 12.1 enterprise edition here

e.g. Supported 11.0.5002.333 (RU5) -> 12.1.671.4971 (RTM) or higher

also for latest upgrade e.g. 12.1.4a  you should already know this link

Featured Post

2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

PREFACE The purpose of this guide is to provide information to successfully install the MS SQL client tools for the Symantec Endpoint Protection Manager (SEPM) to function properly when installed on Windows 2008. AUDIENCE Information Technology…
I recently had to create a utility which aim is to update McAfee's Virusscan and that had to be launched from a command line. I thought I’d share my experience with you. Why is it useful to be able to update an Antivirus from the command line?…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question