SEP 14.3 RU1 Release

[Sulman Mushtaq Mushtaq Hussain]

Hi Everyone, When would 14.3 RU1 going to be released? Is it gonna be a major release? What new features it will have?

------------------------------
Symantec Enthusiast
------------------------------

[SteveGSYMC]

Current ETA for 14.3 RU1 is 11/30/2020. Note that release dates are subject to change.

It is the first Release Update (RU) based on the major release version 14.3 which was released 5/30/2020. You can find further information regarding release terminology here: https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/release-notes/about-endpoint-protection-release-types-and-versio-v123677689-d79e865.html

New features/functionality/fixes will be published at the time of release and can be found in the "Release Notes" section of the online SEP support documentation which can be found here: https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/release-notes.html

[Sherri Austin]

Will 14.3 RU1 support RHEL versions 7.9 and 8.3? We've been testing MP1 and the base OS releases got updated again and now RHEL 7 is at the 7.9 release, which looks like SEP 14.3 MP1 doesn't support. SEP shows the Advanced Protection as malfunctioning so assuming this is due to the 7.9 release?

[Martin Kelemen]

Try this:
https://knowledge.broadcom.com/external/article/152488/manually-compile-autoprotect-kernel-modu.html

[Millennium Communications]

14.3 RU1 is going to be the first to support MacOS 11 (Big Sur) and since all new machines are shipping with Big Sur we really need it.  We are now at 11/30/2020 and there is no sign of a release.  Is there an updated ETA?

[John Owens]

We will know more regarding the release today later this morning.

------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
------------------------------

[John Owens]

GA is currently targeted for 12/7. Just FYI

------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
------------------------------

[Millennium Communications]

Thank you John.  If you could note here if that is changed it would be appreciated.

Thanks,
--
Warren Melnick
Millennium Communications.

[mjohn007]

In our portal we are at:

Client Version14.3.1169.0100

What is the the new RU version?

We can't decipher what release we are on.
Mark J.

------------------------------
Continental Motors
------------------------------

[John Owens]

This is 14.3 MP1. 14.3 RU1 will be available for SES in next couple weeks. 

[RyanH]

Hello,

Will a SEPM upgrade be required to get the 14.3 RU1 endpoint client?

Cheers,
Ryan

[John Owens]

Yes. SEPM upgrade will be needed to run the 14.3 RU1 clients. 

[Scott T]

Mark J.,

You can refer to this document as well for information to decipher the SEP release version (build number) with the Release Name:

https://knowledge.broadcom.com/external/article/154575 -- Release versions, notes, new fixes, and system requirements for Endpoint Security and all versions of Endpoint Protection

--

Scott Tenney

Designated Support Engineer | Symantec Enterprise Division

Broadcom

 

[whitec07]

John,

Are we still on track for the 12/7 RU1 Release?

Looking forward to being able to test with Big Sur and then rolling out big sur. 

Let me know

Chad White
The Speedy Gonzalez

[John Owens]

14.3 RU1 was released Friday. Available for download now. Thanks! 

[Dominique Schmit]

Hello, do you know when translation for other languages (i.e. French) will be available ?

[atb86]

It's been released. Available for download via the support portal.

[whitec07]

I am only seeing 14.3 MP1 in the support portal. Do i need to open a ticket?

[John Owens]

You have to select the drop down and then select 14.3 RU1. 

[whitec07]

I tried that and only see 14.3 MP1 that is the only option that I have.

[John Owens]

Strange. Yeah for Support Portal support you would need to open a case with Customer Care.

If you just want to get the 14.3 RU1 packages you could open a support case and request them as well.

------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
------------------------------

[Mike Presseau]

We use the new SES console, and then went to Download Center, then Support Center, then Downloads link.  I see we have access to 14.3 MP1, and see the drop down box to maybe select something else as well, but only have the one option for 14.3 MP1.

 

Opened a Support case to hopefully find access to it.

 

 

 

 

 

 

 

 

 

Mike Presseau Senior SecOps Engineer Cazena 603-289-8501 [e-mail] cazena.com

 

[CiaranCMS]

HI Mike,

I just checked my portal and noted that only MP1 is available for download with SESE and SESC.  However, RU1 is available if you have a SEP license.
Hopefully support can make it available to you.  I expect the download portal will be updated accordingly in the coming days...

Thanks

------------------------------
CiaranCMS
------------------------------

[Cesar_Americo]

I am trying to update my Dev env with 14.3 RU1, getting an error message on last piece of setup, during db creation, saying that, schemas are not sync, Logs throw an exception:

020-12-07 15:13:03.908 THREAD 1 INFO: Main> executePreLaunchSteps>> Config schema format is getting upgraded from (schema version from db): 14.3.0.0100
2020-12-07 15:13:04.049 THREAD 1 SEVERE: Exception in thread "Upgrade"
2020-12-07 15:13:04.049 THREAD 1 SEVERE: java.lang.NoClassDefFoundError: com/rsa/jsafe/provider/JsafeJCE
2020-12-07 15:13:04.049 THREAD 1 SEVERE: at com.sygate.scm.server.util.RecoveryData.composeRecoveryDataFile(RecoveryData.java:618)
2020-12-07 15:13:04.049 THREAD 1 SEVERE: at com.sygate.scm.server.upgrade.ui.Main.createRecoveryFile(Main.java:874)
2020-12-07 15:13:04.049 THREAD 1 SEVERE: at com.sygate.scm.server.upgrade.ui.Main.executePreLaunchSteps(Main.java:534)
2020-12-07 15:13:04.049 THREAD 1 SEVERE: at com.sygate.scm.server.upgrade.ui.Main.<init>(Main.java:421)
2020-12-07 15:13:04.049 THREAD 1 SEVERE: at com.sygate.scm.server.upgrade.ui.Main.main(Main.java:1142)
2020-12-07 15:13:04.049 THREAD 1 SEVERE: Caused by: java.lang.ClassNotFoundException: com.rsa.jsafe.provider.JsafeJCE
2020-12-07 15:13:04.049 THREAD 1 SEVERE: at java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(BuiltinClassLoader.java:581)
2020-12-07 15:13:04.049 THREAD 1 SEVERE: at java.base/jdk.internal.loader.ClassLoaders$AppClassLoader.loadClass(ClassLoaders.java:178)
2020-12-07 15:13:04.049 THREAD 1 SEVERE: at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:522)
2020-12-07 15:13:04.049 THREAD 1 SEVERE: ... 5 more

Anyone got it already?

Thanks

[John Owens]

Try disabling FIPS and then running the install again.

------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
------------------------------

[Cesar_Americo]

Hi John, FIPSmode seems already to be off. I ran fipsmode.vsb to be sure.

[John Owens]

What version are you upgrading from?  Could be this: Endpoint Protection Manager 14.3 runs out of drive space with HS_ERR_PIDXXXX dump files in ...\tomcat\bin (broadcom.com)

------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
------------------------------

[Cesar_Americo]

I am upgrading from SEP 14.3 MP1 build 14.3.1148.0100 .

[Cesar_Americo]

sorry previous poor image

[Cesar_Americo]

Anyway have some idea how to help on this? I submit a case ( 32422422 ) with Broadcom, it seems they have no idea what is this about. I told that is happening in DEV env and believe if you can, they suggested me to try in Prod, even without having any idea what is causing the issue, root of that. They are too resistant to get cases escalated and not give a satisfactory answer. Man, that support is became painful. 

Please let me know if anyway can help me on this. I really would like to figure out what is happening before trying in Production

Thanks

[John Owens]

I believe we are tracking this defect and looking into a fix. Please mention [ESCRT-5679] to the Support agent you are working with.

------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
------------------------------

[[e-mail]]

Which SQL server do you have in place for the failed upgrade in your test environment? That's hilariously sad that they want you to try it in production next.

We have a Test environment that we're preparing to upgrade to 14.3-RU1 from 14.3-MP1 (14.3.1148.0100) and MSSQL 2014. Can you provide feedback on the issue as it is diagnosed by Symantec Support?

Thank you.


------------------------------
Tom Napier
Lead Analyst
End-user Technology Group
CBC/Radio-Canada
------------------------------

[John Owens]

The issue is still being investigated. Once an article is created I will post it here.

------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
------------------------------

[[e-mail]]

Thank you John for your assistance in this group, it's greatly appreciated.

------------------------------
Tom Napier
Lead Analyst
End-user Technology Group
CBC/Radio-Canada
------------------------------

[John Owens]

No problem Tom! 

Database schema is not upgraded during upgrade to Endpoint Protection Manager 14.3 RU1

https://knowledge.broadcom.com/external/article/204664/

------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
------------------------------

[Cesar_Americo]

Hi John, may ask if there is some timeline to get a new about it? Per other random threads seems some other reported issues. Will be release a MP for this?

thanks

[John Owens]

Hi Cesar, I am not aware of an MP being released soon. There is one planned for the future though.  This issue is still being investigated and the article will be updated once a workaround is found.

------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
------------------------------

[AneeshNic]

Hi John , 

Need your kind help to let us know if there are any updates or any hot fixes expected for the same 

https://knowledge.broadcom.com/external/article/204664/

The KB article does not have an update yet.Appreciate your help.

[Cesar_Americo]

I have:

Microsoft SQL Server 2014 (SP3) (KB4022619) - 12.0.6024.0 (X64) Sep 7 2018 01:37:51 Copyright (c) Microsoft Corporation Enterprise Edition: Core-based Licensing (64-bit) on Windows NT 6.3 <X64> (Build 9600: ) 

Just received this update from Broadcom due this case (#32422422): 

"We have identified an issue with the latest version that was released yesterday, we are reviewing the same and we will keep you posted on updates."

I will let you know for news. Please do same if you get something in your side. Thanks

[Alex Chadwick]

A few observations with my upgrade from 14.3 MP1 to RU1 on a PROD clone.

- if you have changed domain policy on passwords between original SEPM install and this install expect to change the password through the server management configure tool first, when prompted through RU1 it fails on error.

- If you do change the password above make sure to update the local "admin" account to match

- RU1 forces ODBC and SQL Express encrypted channel yet no cert exists so the console will error out with 0x10010000 - Either attempt to reconfigure SQL to run under an account so the permissions can be set for it access certificates or reconfigure the ODBC and SQL protocol to not force TLS until its setup.

- If you harden your Windows servers and restrict privileges this update requires the user to have the "SEeSecurityPrivilege", with out it you will receive an error in the DB upgrade section on not being able to access/update audit events.

- Expect this RU update to take 1-2 hours to complete, a DB backup and restore must happen, unlike previous updates where it could be done easily under 20 minutes.

This is the first update I would not attempt a prod only install first!

[John Owens]

I am not aware of any updates at this time. I would suggest opening a case and requesting information, or holding off on 14.3 RU1 upgrades until we have an update in the article.

------------------------------
John Owens
Strategic Support Engineer | Symantec Enterprise Division (SED)
Symantec
United States
------------------------------