You need to migrate to Endpoint Protection 14.2 from an earlier version of Symantec Endpoint Protection (SEP).
- If you have received a Symantec Endpoint Protection version upgrade (VU) notification letter by email and want more information on what to do next, see How do I acquire and upgrade to Symantec Endpoint Protection 14?.
- If you do not have an earlier versions of Symantec Endpoint Protection, read the Installation and Administration Guide for installation instructions.
- About this release
- Downloading this release
- Upgrading to this release
- Managing Endpoint Protection licenses
Find out what's new, learn about known issues, and get additional information about each release.
- What's new for all releases of Symantec Endpoint Protection 14.x
- New fixes and component versions in Symantec Endpoint Protection 14.2
- Symantec™ Endpoint Protection 14.2 Release Notes
- System requirements for Endpoint Protection 14.2
If you do not see version 14.0.x available for download, see How do I upgrade to Symantec Endpoint Protection 14?.
Upgrade and migration paths
- The Symantec Endpoint Protection 14.2 client upgrades seamlessly over all previous 12.1 and 11 client versions installed on supported operating systems. The exception is the Mac client earlier than 12.1.4, which you must upgrade to 12.1.4 or later, or uninstall it.
- 14.0.x dropped support for Windows XP, Server 2003, and any Windows Embedded operating system that is based on Windows XP. Symantec Endpoint Protection Manager 14.2 can manage these computers as legacy 12.1.x clients.
- Symantec Endpoint Protection Manager 14.2 upgrades seamlessly over 12.1.x*, except where support has been dropped, such as: Windows Server 2003, desktop operating systems, and 32-bit operating systems, as well as some versions of SQL Server. See the system requirements for details.
- Symantec Endpoint Protection Manager 11 is blocked when migrating to version 14.2. You must upgrade to 12.1.x, and then upgrade to 14.2.
For additional information, see Supported upgrade paths to Symantec Endpoint Protection and Symantec Endpoint Protection Migration Considerations.
Upgrading to the current version of Symantec Endpoint Protection involves the following steps, in order:
- Step 1: Create an upgrade plan
- Step 2: Back up and prepare for disaster recovery (critical)
- Step 3: Prepare Symantec Endpoint Protection 12.1 managers
- Step 4: Stop the Symantec Endpoint Protection Manager service
- Step 5: Upgrade the Symantec Endpoint Protection Manager
- Step 6: Upgrade the Symantec Endpoint Protection clients
Step 1: Create an upgrade plan
Before you install the Symantec Endpoint Protection client, manager, and any administration upgrades, you should have a solid understanding of your network topology and create a streamlined plan to maximize the protection of your network during the upgrade.
- Symantec recommends that you do not perform third-party installations simultaneous to the installation or upgrade of Symantec Endpoint Protection. Installing third-party software that makes network- or system-level changes may cause undesirable results when you upgrade Symantec Endpoint Protection.
- If possible, restart client computers before installing or upgrading Symantec Endpoint Protection.
- If you are migrating to Windows 10 as well as upgrading Symantec Endpoint Protection from version 12.1.6 or earlier, you must migrate Symantec Endpoint Protection first. For more information, see Endpoint Protection Support for Windows 10.
- Symantec recommends that you upgrade the entire network to the current version of Symantec Endpoint Protection, rather than manage multiple versions.
Step 2: Back up and prepare for disaster recovery
Before you upgrade, back up the database and prepare for disaster recovery. These steps are different depending on your version:
Step 3: Prepare Symantec Endpoint Protection 12.1.x managers for migration
Step 4: Stop the Symantec Endpoint Protection Manager (SEPM) service
Stop any Syslog services or similar running on the SEPM that could potentially lock SEPM files or folders and cause the upgrade to fail.
Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site. After you upgrade, the management server automatically starts the service.
Step 5: Upgrade the Symantec Endpoint Protection Manager
You install the new version over the existing version. The over-install process saves your settings, and then upgrades to the latest version.
At any point after the management server upgrade, you can enroll the Symantec Endpoint Protection Manager with the cloud portal:
Step 6: Upgrade the Symantec Endpoint Protection clients
You do not need to uninstall previous clients before you install the new version. The over install process saves the client settings, and then upgrades the client to the latest version.
Note: Clients that are Group Update Providers (GUPs) should be upgraded before other Endpoint Protection clients.
Review the applicable steps in Preparing Windows and Mac computers for remote deployment and then choose from one of the available methods to upgrade clients:
- AutoUpgrade: Assign client packages to groups in the manager console, either manually or by using the Upgrade Clients with Package wizard.
No further action is required on your part to complete the upgrade process. To disable automatic upgrades, in the console, go to the Computers page, right-click your Group, click Properties, and then check Disable Automatic Client Package Updates.
- Installation File - Use the installation file you download from Symantec FileConnect to upgrade the client.
- Client Deployment Wizard - Run the Client Deployment Wizard in the manager console. This wizard walks you through the creation of a client package that can be deployed by a web link and email, remote push, or saved for later local installation. You can also deploy using third-party tools.
For detailed upgrade instructions, see Choosing which method to upgrade the client software in the Installation and Administration Guide.