SEPM (On-Prem) Migration to SES

[Sulman Mushtaq Mushtaq Hussain]

Hi everyone, currently we have SEPM 14.3 on-prem. Recently we have purchased the SES Complete license. We intend to migrate to SES cloud and de-commission our On-Prem SEPM environment. 

We want to make sure that this migration process is seamless and would like to know what is the best approach.

Is it recommended to enroll On-Prem SEPM to SES then enable the option on SES cloud that says Manage Polices and Devices from the cloud?

I have the below questions in this regard.

1) How soon all the policies and agents will move from on-prem SEPM to SES?

2) The clients will transition smoothly from on-prem to SES? Are there any reinstall required?

3) Do we need to upgrade the existing SEP agents to ulitize advanced SES features like Behavior Isolation, Application Isolation, EDR etc etc?

Are there any recommendations that you can share which mill make sure that this migration happens smoothly?

Appreciate your comments. Thanks

------------------------------
Symantec Enthusiast
------------------------------

[Sulman Mushtaq Mushtaq Hussain]

Anyone ??

------------------------------
Symantec Enthusiast
------------------------------

[Adam Licata]

John and I replied to your this thread in the SEP forum.

------------------------------
Product Management
Broadcom
------------------------------

[Javier Armesto]

Hi Sulman,

I answer your questions:

1) For upgrade SEP to SES, you can:

• Hybrid (link SES console with SEPM toKen via): This process takes a few hours to complete only since the token is provided in SEPM. here you can manage clients from cloud console, manage policies from cloud console or both, you choose!
• If your SEP Agent version is 14.3 MP1 or higher, it is not necessary to reinstall agents, if it is lower YES! (https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-security/sescloud/Upgrading/Performing-the-migration-to-Symantec-Endpoint-Security/converting-on-premises-clients-to-cloud-managed-sy-v132988118-d4155e11816.html#v132988118)
• You can export SEPM policies to SES via .DAT file

2) For the transition (for the agents to change their "pointer" from SEPM to SES), you can follow the steps mentioned in the previous link. Please note the version of Agent, if it is less than 14.3 MP1, you will have to reinstall Agent.

3) EDR and TDAD functionality is only available as a feature in SES. A hybrid management option is not supported (https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-security/sescloud/Upgrading/Performing-the-migration-to-Symantec-Endpoint-Security.html)

Kind Regards,