ITMS 8.7 General Availability

[Mike Grueber]

On behalf of Broadcom, we are pleased to announce that IT Management Suite 8.7 is now generally available. 

Highlights of the Symantec IT Management Suite 8.7 release include: 

• Modern Device Management (MDM) support for Windows 10 and 11, enabling devices to be managed without the Symantec Management Agent
• Patch Management –Compliance by CVE-ID (CISA) report that shows compliance with respect to only those CVE-IDs associated with a vulnerability on the CISA Known Exploit List
• Software Management – Ability to condition the execution of tasks within Managed Software Delivery policies
• Software Management – More granular control of end user deferral options within Managed Software Delivery policies
• Software Management – Option to automatically update Managed Software Delivery policies to reflect changes in supersedence relationships between software components
• Software Inventory – Windows file scan data limited to .EXE files by default to reduce amount of data transmitted to Notification Server
• Basic Inventory – Delta data files reduce amount of data transmitted to Notification Server when change in connection type (CEM/non-CEM), local IP address or network adapter (physical adapter/VPN)
• Basic Inventory – Collect Azure Tenant ID to distinguish devices owned by different customers
• Deployment Solution – Install/upgrade plug-ins to Symantec Management Agent as part of provisioning process
• Simplified experience of installing, upgrading and uninstalling Symantec Management Agent and plug-ins
• Symantec Management Agent support
• Windows 10 22H2 and Windows 11 22H2
• Windows 10/11 IoT Enterprise
• macOS 13 (Ventura)
• Red Hat Enterprise Linux 8.7, 9.0 and 9.1
• Oracle Linux 8.7, 9.0 and 9.1
• Database support for Microsoft SQL Server 2022
• Hypervisor support for VMware ESXi 7.0
• Symantec Management Console
• Organizational view – ability to only show users, computers or printers and search by name
• Report Builder – ability to filter list of expression values

Please see the ITMS 8.7 Release Notes for more information.

[Samir Mujkanovic]

Hi,

nice to know that 8.7 is released now. My question is if there is also like an Autopilot functionality with the newly integrated MDM.

Thanks,

Samir

[Mike Grueber]

Hi Samir,

If you are asking whether a device can be enrolled as part of the provisioning process, the answer is "No" for now.  Enrollment is performed by providing users with a URL that will launch the enrollment process or take them to a landing page from which the enrollment process can be launched.

[Broadcom Customer]

Hi Mike, 

Hope you are doing well. 

We are having an issue with this latest version when we are trying to update the agents. It says "Error while downloading package: No package sources returned by server after upgrading " is that a bug or something? 

[Mike Grueber]

Hi,

I am sorry to hear that you are experiencing an issue when upgrading the agent.  I am not aware of any other customers reporting this issue after upgrading to ITMS 8.7.  So, it's not clear that this is a bug.  It could be an environmental issue.

Please open a case, so that the technical support team can assist you in troubleshooting the situation.

[Riggzie]

This is awesome! I have already upgraded our DEV environment to see what will be involved going from 8.5 RU4 to 8.7 with point fixes. Mostly all went well; however, we ran into a few minor issues that I have contacted support about and we are good to go for the most part. There is still one minor thing but we are looking good to start moving to 8.7 in the next few months.

our few minor issues for others to think about:

If you cloned symantec administrators group and have a custom admins group (as we do)

• When editing a filter as the cloned admin, for the Filter Definition setting, "Query Mode: SQL Builder" is missing. (We do not use query builder but this was an observation)
  • Fix - Privileges tab of role - check off Use Filter builder under Management PriviligeS
• Cloned "Symantec Administrators" role, after upgrade to ITMS 8.6 RU3, can't import a new SW Package.
  • https://knowledge.broadcom.com/external/article/258423
• Deploy/upgrade main CMS agent - new check box "Upgrade Symantec Management Agent plug-ins"
  • Worked great and love that this was added; however, we had a machine that refused to upgrade inventory plugin
• Deployed a package via SWD to 12 machines
  • 8 successful.
  • 4 download pending
    • All sit on same subnet, same package server as they are our test machines that we utilize all the time.
    • Eventually things went, but it took 8h or so. 

So you see they are minor and not too bad.

[Jose Roberto]

Hello Mike,

Can we expect the MDM for Windows to be used for patching, as we saw with the MDM for MAC OS?
Regards,

------------------------------
Jose Roberto Costa
Europe Consultant | Consulting and Strategy
mobile: [phone]
[e-mail] | orbitextreme.com
------------------------------

[Mike Grueber]

Hello Jose Roberto,

Our engineering team is doing some research regarding MDM support for Windows updates.  I have contacted you offline to get more information regarding your needs in that regard.