Embed Size (px)
Citation preview
L07-‐Lab Guide.
UP L12: Still on SEP 11? Let us show you how to simplify migration to SEP. Description
Migrating to Symantec Endpoint Protection (SEP)? Want to upgrade to the latest SEP technology? In this Lab, see how to upgrade a multi-site Symantec Endpoint Protection environment. You will learn how to deploy the latest technologies and seamlessly migrate clients to SEP 12.1-RU2
At the end of this lab, you should be able to
§ Understand how to Migrate SEP 11.x SEPMs to
SEP 12.1-RU2 § Understand how to Migrate SEP 11.x Clients to
SEP 12.1-RU2
Notes
§ A brief presentation will introduce this lab session and discuss key concepts.
§ The lab will be directed and provide you with step-by-step walkthroughs of key features.
§ Feel free to follow the lab using the instructions on the following pages. You can optionally perform this lab at your own pace.
§ Be sure to ask your instructor any questions you may have.
§ Thank you for coming to our lab session.
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
2 of 43
TABLE OF CONTENTS
L06-‐MIGRATING TO SEP 12.1-‐RU2 1
EXERCISE 1: BACKUP SITE DATABASE (OPTIONAL) 3
EXERCISE 2: DISABLE REPLICATION 5
EXERCISE 3: STOP THE SYMANTEC ENDPOINT PROTECTION MANAGER SERVICE 9
EXERCISE 4: UPGRADE 1ST SEP MANAGER (SITE 1) 11
EXERCISE 5: UPGRADE 2ND SEP MANAGER (SITE 1) ERROR! BOOKMARK NOT DEFINED.
EXERCISE 6 & 7: UPGRADE 3RD SEP MANAGER (SITE 2) 21
Exercise 6: Stop the Symantec Endpoint Protection Manager service 21
Exercise 7: Upgrade 3rd SEP Manager 23
EXERCISE 8 & 9: RE-‐ESTABLISH REPLICATION 32
Exercise 8: Re-‐Establish Replication (Site 1) 32
Exercise 9: Re-‐Establish Replication (Site 2) 39
EXERCISE 10: DEPLOYING SEP 12.1-‐RU2 CLIENTS (OPTIONAL) 41
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
3 of 43
Exercise 1: Backup Site Database (Optional) Before migrating to SEP 12.1-‐RU2, administrators should back up the existing database. This Exercise take an estimated 10 minutes to Complete
Step 1: Log on to SEPM Console (SEPM1)
Username: admin Password: Symc4now
Step 2: Navigate to the Servers Menu under the Admin Tab
Click the admin icon on the Left Menu Pane
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
4 of 43
Click Servers and then click on the DB Server under the View Servers tab.
Step 3: Start the Backup
Click the Back Up Site Now task
Step 6: Verify Backup has completed
After the Backup has completed, the console should display a successful backup has completed.
Exercise 1b: Run DValidator (Optional) Start a command prompt or double click the batch file under the “Tools” folder located in the installed SEPM directory
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
5 of 43
Run dbvalidator.
Navigate to tomcat/logs/
Open dbvalidator file (no extension).
Success is “validation passed”
If there are ay broken links or any other failures the upgrade process will not be succesfull.
Exercise 2: Disable Replication If your site uses replication, you must disable replication before upgrading Symantec Endpoint Protection Manager. You must disable replication at each site that replicates.
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
6 of 43
Step 1: Log on to SEPM Console on SEPM1
Username: admin Password: Symc4now
Step 2: Navigate to the Servers Menu under the Admin Tab
Click the admin icon on the Left Menu Pane
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
7 of 43
Click Servers
Step 3: Navigate to Replication Partners
On the View Servers menu, expand the Local Site, and then Expand Replication Partners
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
8 of 43
Step 4: Delete Replication Partner in each site (Site 1 and Site 2).
Logged into Site1 (SPEM1) and deleting “Site 2”
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
9 of 43
Step 5: Delete Replication Partner in each site:
Logged into Site 2 (SEPM3) and deleting “Site 1”
Exercise 3: Stop the Symantec Endpoint Protection Manager service Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically.
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
10 of 43
Step 1: On SEPM1, Open the Windows Services Management Tool
On the Windows Start Menu, Click All Programs, Administrative Tools, Services
Step 2: Stop the Symantec Endpoint Protection Manager Service
Scroll down to find the SEPM Service. Select the "Symantec Endpoint Protection Manager" Service, then Select the Stop Service option. The Service Status should now reflect the service not running.
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
11 of 43
Step 3: Repeat Steps 1 & 2 on each SEPM in SITE 1 Exercise 4: Upgrade 1st SEP Manager (Site 1) Complete Exercise 4 on Server, SEPM1
Step 1: Locate SEP 12.1-‐RU2 Install Media
On the Desktop, Open the SEP 12.1-‐RU2
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
12 of 43
Step 2: Open the SEPM Folder
Step 3: Run the SEPM Setup
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
13 of 43
Step 4: Install SEPM
Click Next
Click Next
Step 5: Accept License Agreement
Select "I Accept the terms in the License agreement" Option, and select next
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
14 of 43
Step 6: If using SQL, you must supply the DB Credentials. This lab uses the embedded database so no credentials need to be added here. Click Next
Select Install
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
15 of 43
Step 7: Management Server and Console Installation Summary
Click Next
Step 8: Upgrade Wizard
Click Next
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
16 of 43
Step 9: Additional Port Settings
Click Next
Step 10: Additional DB Options
Click Next
Note: If your organization currently runs database maintenance tasks directly on SQL server you should uncheck these database maintenance tasks.
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
17 of 43
Step 11: Data Collection
Click Next
This Step will take Approximately 3-‐7 Minutes to complete
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
18 of 43
Once the Upgrade has Succeeded, Select Next
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
19 of 43
Step 12: Upgrade is Complete
Click Finish
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
20 of 43
Step 13: Verify SEPM Upgrade has completed
Log On to the SEPM Console using the following credentials:
Username: admin Password: Symc4now
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
21 of 43
Exercise 5 and 6: Upgrade SEP Manager on remote site (Site 2 named: “SEPM3”)
Exercise 5: Stop the Symantec Endpoint Protection Manager service Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the service is started automatically.
Step 1: On SEPM3, Open the Windows Services Management Tool
Right-‐click “My Computer” and select Manage
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
22 of 43
Step 2: Stop the Symantec Endpoint Protection Manager Service
Scroll down to find the SEPM Service. Select the "Symantec Endpoint Protection Manager" Service, then Select the Stop button.
The Service Status should now reflect the service not running.
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
23 of 43
Exercise 6: Upgrade 2nd SEP Manager
Step 1: Locate SEP 12.1-‐RU2 Install Media on SEPM2
On the Desktop, Open the SEP 12.1-‐RU2.2 folder
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
24 of 43
Step 2: Open the SEPM Folder
Step 3: Run the SEPM Setup
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
25 of 43
Step 4: Install SEPM
Click Next
NOTE: If you encounter a Low Disk Space Error, the contents of the folder "c:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\Inetpub\Content" can be erased and the install can be attempted again. The contents of this folder will be recreated after the SEPM Starts.
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
26 of 43
Click Next
Step 5: Accept License Agreement
Select "I Accept the terms in the License agreement" Option, and select next
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
27 of 43
Select Next
Step 6: Install the Manager
Click Install
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
28 of 43
Click Next
Step 7: Upgrade Wizard
Click Next
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
29 of 43
Step 8: Additional Port Setup
Click Next
Click Next
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
30 of 43
Click Next
Step 9: Server Upgrade Complete
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
31 of 43
Select Next
Click Finish
Step 10: Verify SEPM Upgrade has completed
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
32 of 43
Log On to the SEPM Console using the following credentials:
Username: admin Password: Symc4now
Exercise 7 & 8: Re-‐Establish Replication
Exercise 7: Re-‐Establish Replication (Site 1)
Step 1: Log on to SEPM Console on SEPM1
Username: admin Password: Symc4now
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
33 of 43
Step 2: Navigate to the Servers Menu under the Admin Tab
Click the admin icon on the Left Menu Pane
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
34 of 43
Step 3: Add Replication Partner
Select Local Site. From the Tasks Menu, select Add Existing Replication Partner
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
35 of 43
Select Next
Step 4: Specify Existing Site Information
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
36 of 43
Use the following information:
Remote Server IP Address or Name: SEPM2 Remote Port Number: 8443 Name: admin Password: Symc4now
Select Next
Step 5: Configure Replication Schedule
Click Next
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
37 of 43
Step 6: Configure What Data to Replicate
Click Next
Click No
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
38 of 43
Step 7: Finshed
Click Finish
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
39 of 43
Exercise 9: Re-‐Establish Replication (Site 2)
Step 1: Log on to SEPM Console on SEPM2
Username: admin
Password: Symc4now
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
40 of 43
Step 2: Navigate to the Servers Menu under the Admin Tab
Click the admin icon on the Left Menu Pane, Then Select Servers on the Sub-‐Menu Pane
Step 3: Verify Replication Partner has been added
Select Local Site. Verify the Replication Partner has been added.
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
41 of 43
Exercise 10: Deploying SEP 12.1-‐RU2 Clients (Optional)
Step 1: Navigate to the Client Group
In the SEPM Console, navigate to the group that contains the clients you wish to upgrade, and select the Install Packages Tab.
Step 2: Select the Add a Client Install Package
Under the tasks menu, click on the Add a Client Install Package
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
42 of 43
Step 3: Select the Package to Deploy
Select the Drop Down Menu
Select the SEP version 12.1.2015.2015 for WIN64BIT package
Step 4: Optional Parameters Specify any optional parameters including:
L-‐06 Lab Guide – Migrating to SEP 12.1-‐RU2
43 of 43
Times of Day to Deploy, Download Source, Notifications
Click Ok
Note: Now that the package has been assigned, the client will upgrade on the next heartbeat or next heartbeat in the defined upgrade schedule window.
END OF EXERCISE. Thanks for following this lab session. We hope it was useful, do not forget to fill out the survey as indicated by the trainers.
