Quick start for upgrading an on-premises
Symantec Endpoint Protection Manager
to
Symantec Endpoint Security

Prerequisites
  • Ensure that
    Symantec Endpoint Protection Manager
    version 14.x or later is installed.
  • Ensure that
    Symantec Endpoint Protection
    client version 14.x or later is installed.
  • Ensure that all potential clients have access to Symantec cloud resources, whether directly, by proxy for the devices, or by proxy for the clients.
  • Document which user-defined settings the on-premises
    Symantec Endpoint Protection
    clients use (such as in the Firewall and Exceptions policies) so that you can configure them in the cloud-managed client later. You cannot export these user-defined settings from the
    Symantec Endpoint Protection Manager
    for import to the
    Endpoint Security
    cloud console.
  • Create an account and a tenant on the Symantec Security Cloud. See:
Step 1: Before you upgrade
  1. Identify the features you want to use and ensure that they are available in
    Symantec Endpoint Security
    . See:
  2. Identify any
    Symantec Endpoint Protection Manager
    policies that you want to bring with you to
    Endpoint Security
    . See:
  3. Create device groups in
    Endpoint Security
    based on how you organize your endpoints for the purpose of applying policies. See:
Step 2: Migrate your
Symantec Endpoint Protection Manager
policies (optional)
  1. Export the
    Symantec Endpoint Protection Manager
    policies that you want to move to
    Endpoint Security
    . See:
  2. Apply the imported policy to the appropriate device groups. See:
Step 3: Upgrade the Windows clients
Whether or not you have the latest version of the client on the device, from
Endpoint Security
, you must create and deploy the Symantec Agent installation package on your devices. The installation package redirects the clients to connect to the cloud service. See:
  • If your devices have the latest version of the client, running the installation package reconfigures the clients to be cloud-managed agents.
    You can also use the smc command-line switch to convert an existing 14.2.x on-premises client to cloud-managed. This process requires an installation package from the cloud, but completes without a need to restart the device. See:
  • If the devices do not have the latest version of the client, the installation package updates the clients with the latest features and establishes the network connectivity to the cloud.
Install a cloud-managed agent on a test machine before starting a large deployment. See:
More information