AutoUpgrade lets you automatically upgrade the Symantec Endpoint Protection client software on all of the Windows or Mac clients in a group.
With AutoUpgrade, Windows standard clients receive a delta upgrade package that Symantec Endpoint Protection Manager creates. This package is smaller than the full installation package. Windows embedded or VDI clients always receive the full installation package. These clients do not maintain a copy of the installer in the installer cache. Mac clients always receive the full installation package.
Use the following best practices for using AutoUpgrade:
Test the AutoUpgrade process before you attempt to upgrade a large number of clients in your production network. If you do not have a test network, you can create a test group within your production network. For this kind of test, you add a few non-critical clients to the test group and then upgrade them by using AutoUpgrade.
To reduce bandwidth during peak hours, schedule AutoUpgrade for after hours in the Upgrade Clients with Package wizard, especially for client groups with reduced-size clients. For wide area networks, you should also set up the remote clients to receive the upgrade package from a remote web server.
Since AutoUpgrade was first included in the Mac client with Symantec Endpoint Protection 14, you cannot upgrade with AutoUpgrade from a version earlier than 14.
After you upgrade Symantec Endpoint Protection Manager, run LiveUpdate in the console at least once before you use AutoUpgrade to upgrade the clients.
AutoUpgrade can only install the Application Hardening feature on client computers when the following conditions are met:
You must enable Maintain existing client features when updating when you run Upgrade Clients with Package. This setting is enabled by default.
The client computer cannot have the Symantec Data Center Security agent installed.
The Virus and Spyware Protection feature is currently installed and selected for upgrade.
AutoUpgrade for this feature is only available as of version 14.2.
To upgrade client software with AutoUpgrade
In the console, click Admin > Install Packages.
Under Tasks, click Upgrade Clients with Package.
In the Upgrade Clients Wizard panel, click Next, select the appropriate client installation package, and then click Next.
Select the group or groups that contain the client computers that you want to upgrade, and then click Next.
Select from where the client should download the package from the following options:
To download from the Symantec Endpoint Protection Manager server, click Download from the management server.
To download from a web server that is local to the computers that need to update, click Download from the following URL (http or https). Enter the URL of the client installation package into the provided field.
Click Upgrade Settings to specify upgrade options.
On the General tab, under Client Settings, choose from the following options, depending on the client operating system:
For Windows, use the drop-down menus to select options for Maintain existing client features when updating and Install Settings.
If you deselect Maintain existing client features when updating, you can optionally add or remove features when upgrading.
For Mac, use the drop-down menu to select options for Install Settings.
For Windows, Content Selection lets you include content in the installation package. If you include content, the package is larger, but the client has up-to-date content immediately after installation. If you do not include content, the package is smaller, but the client must get content updates after installation.
You can also add an optional upgrade schedule. Without a schedule, the AutoUpgrade process begins after the wizard completes.
On the Notification tab, customize the user notification settings.
You can customize the message that is displayed on the client computer during the upgrade. You can also allow the user to postpone the upgrade.
Click OK, and then click Next.
In the Upgrade Clients Wizard Complete panel, click Finish.
To confirm the version number of the client software
After the upgrade completes, you can check the version to confirm a successful upgrade in one of the following ways:
In the console, click Clients > Clients, select the appropriate group, and change the view to Client Status.
On the Windows client, in the Symantec Endpoint Protection client interface, click Help > About.
On the Mac client, open the Symantec Endpoint Protection client interface. In the menu bar, click Symantec Endpoint Protection > About Symantec Endpoint Protection.
The client computer must restart after the upgrade. By default, the clients restart after installation. You can configure the restart options in the group's general settings to control how the clients in a group restart after AutoUpgrade. You can also restart the clients at any time by running a restart command from the management server.
For 12.1, see the following page for information on feature mapping from 11.0: Feature mapping between 11.0 and 12.1 clients