FAQ: Upgrading Symantec Endpoint Protection 11 to 12.1


Article ID: 158110


Updated On:


Endpoint Protection


Symantec Endpoint Protection (SEP) 11.x reached End of Limited Support (EOLS) on January 5, 2014 and End of Support Life (EOSL) on January 5, 2015. This includes all maintenance packs and patches. Symantec recommends that all customers upgrade to the latest version of Symantec Endpoint Protection, 12.1.x.

There is no cost to upgrade for customers with a current maintenance contract.



Frequently Asked Questions (FAQ)

Why should I upgrade, aside from EOLS and EOSL?

The threat landscape has changed significantly since the initial release of Symantec Endpoint Protection 11 in 2007. Today, full protection requires the five layers of defense in Symantec Endpoint Protection 12.1.x. Beyond the advancements in protection technology, Symantec Endpoint Protection 12.1.x has also been optimized for both physical and virtual systems to run lighter and faster to ensure blazing performance and IT efficiency.

When are the EOLS and EOSL dates?

Symantec Endpoint Protection 11.x reached EOLS on January 5, 2014, and EOSL on January 5, 2015. For further information, see the document Symantec Endpoint Protection 11.0.x End of Support Life.

What do EOLS and EOSL mean for Symantec Endpoint Protection 11.x customers?

EOLS means that as of January 5, 2014, no new versions of Symantec Endpoint Protection 11.x are under development or are planned for release. All support services, including without limitation, bug fixes/patches and engineering modification, for Symantec Endpoint Protection 11.x ended on the EOLS date. Content (virus definitions) were provided until January 5, 2015, but there was no support Windows Fundamentals or PowerPC as of January 5, 2014.

EOSL means that as of January 5, 2015, all support services, including technical support, are no longer provided for Symantec Endpoint Protection 11.x. This is the end of the product life cycle.

Does EOSL apply even if the customer has a current maintenance contract?

Yes. EOSL applies to current maintenance contracts.

How much does the upgrade cost?

The upgrade to Symantec Endpoint Protection 12.1.x is free for Symantec Endpoint Protection 11.x customers with a current maintenance contract.

What if I don't have a current maintenance contract?

Symantec Endpoint Protection 11.x customers without a current maintenance contract can purchase Symantec Endpoint Protection 12.1.x with a discounted version upgrade SKU, known as a Version Upgrade (or VER UG). Ask your Symantec Sales Executive, Partner or Renewal Representative for more information.

Is technical support available for upgrades conducted after the EOLS date?

No. Support ended on January 5, 2015.

Are there any options if I am unable to upgrade before the EOSL date?

All support services end on the EOSL date. If you have any questions on options for assistance in moving to Symantec Endpoint Protection 12.1.x, contact Customer Care or your Symantec account representative for more details.

Where can I learn more about Symantec's EOLS and EOSL policy?

See the documents End of Life Policy for Symantec Business Software Products and Frequently Asked Questions: End of Life and changes in Support Deliverable for Symantec Business Products for detailed information on Symantec's EOLS and EOSL policy.

What versions of Symantec Endpoint Protection 11.x can I upgrade to Symantec Endpoint Protection 12.1.x?

For detailed information on supported upgrade paths, see the following knowledge base article:

Supported upgrade paths to Symantec Endpoint Protection Manager 12.1 from Symantec Endpoint Protection Manager 11.x

Do I have to uninstall Symantec Endpoint Protection 11.x first?

No, you can install Symantec Endpoint Protection 12.1.x directly over your Symantec Endpoint Protection 11.x environment; however, you may find that additional or updated hardware is required. For more information, see the following knowledge base article:

Release notes, new fixes, and system requirements for all versions of Endpoint Protection

Are any tools available to help with the upgrade?

Upgrade services are available through the Symantec Partner Community.

What should I think about in advance before I begin upgrading my Symantec Endpoint Protection environment from 11.x to 12.1.x? Are there any best practices for upgrading?

While the process of upgrading from Symantec Endpoint Protection 11.x to version 12.1.x works with your existing infrastructure and functions more like applying a Release Update, you should review the following knowledge base article before you begin:

Best practices for upgrading to the latest version of Endpoint Protection 12.1.x

Customers have cited this article as the #1 resource in upgrading from 11.x to 12.1.x.

What are the steps to upgrade Symantec Endpoint Protection from version 11.x to 12.1.x?

For specific steps to upgrade Symantec Endpoint Protection 11.x to version 12.1.x, see the following knowledge base article:

Upgrade or migrate to Symantec Endpoint Protection 12.1.6 - 12.1.6 MP4

Are client and policy settings maintained?

Yes. Policy settings are preserved in the database during the upgrade of the Symantec Endpoint Protection Manager. When you upgrade the client, the default client installation setting maintains all logs, policies, and communication settings on the client.

For information on how protection features map between versions, see Feature mapping between 11.x and 12.1 clients.

Do I need to restart the Symantec Endpoint Protection 12.1.x client computer after upgrade?

A restart is not required, but the computers that are not restarted after an upgrade are still running (and are protected by) Symantec Endpoint Protection 11.x features. You must restart the client computer to complete the installation of Symantec Endpoint Protection 12.1.x.

Is there a report that shows me the upgrade progress for clients?

Yes. You can run a report from the Reports page. On the Quick Reports tab, select Computer Status as the report type, select Deployment Report as the report to run, and then click Create Report.

The report includes details about the following results:

  • Installed, restart needed
  • Rollbacks
  • Errors


How long does it take to upgrade my environment to Symantec Endpoint Protection 12.1.x?

The upgrade should take you approximately as long as it takes to apply a Release Update, from disaster recovery preparation to upgrading the clients.  The actual update can require as little as fifteen minutes; however, depending on the level complexity within your environment, the testing process, and stages of deployment, some customers have spread the migration process over several weeks or months.

What kind of success rate should I expect when upgrading my Symantec Endpoint Protection clients from version 11.x to 12.1.x?

The more thoroughly you perform pre-upgrade analyses and tasks, the better your success rate. For example, if you use Application and Device Control and you successfully disable the setting "Protect client files and registry keys" for the clients, the chance increases that those clients upgrade successfully. Additionally, if you create a test environment before you upgrade your production environment, or upgrade a subset or group first, you can greatly increase the upgrade success rate.