search cancel

About upgrading to Symantec Endpoint Protection Manager (SEPM) 14.3 RU1 and the un-installation of the Symantec EDR Synapse Log Collector and embedded SEPM database


Article ID: 199062


Updated On:


Endpoint Detection and Response


If you upgrade to Symantec EDR 4.5 or later, Symantec EDR automatically re-establishes the database connection to the Microsoft SQL Server database.  You might see a connection error in Symantec EDR while the re-configuration to MS SQL Server database occurs.  If the issue persists, you can manually configure the MS SQL Server database connection in the Symantec EDR appliance console. 



SEPM no longer supports the Symantec EDR embedded database or the Synapse Log Collector. 


Symantec EDR appliances


If you continue to use Symantec EDR 4.4 or earlier after you upgrade to SEPM 14.3 RU1, SEPM uninstalls the SEPM embedded database and the Synapse Log Collector.  Symantec EDR no longer receives logs from SEPM until you do either of the following tasks:

  • Upgrade to Symantec EDR 4.5 (upon upgrade, Symantec EDR automatically configures the connection to the MS SQL Server database).   For the connection to be automatically re-established, you must also have SEPM Controller connection for same SEPM server. 
  • Add a new connection and remove the existing one.  Preferably, edit the existing connection and change the type to MS SQL.

Note:  If a self-signed certificate was used in the embedded database setup, the connection appears in the EDR appliance console as "Unencrypted".  See the Symantec EDR documentation for information about how to encrypt the MS SQL database.  

Additional Information

Symantec EDR continues to support the Synapse Log collector for the embedded database for customers who use SEPM 14.3 MP1 and earlier.

If you use the MS SQL Server database before you perform either upgrade (SEPM or Symantec EDR), no changes are required. See the Symantec EDR documentation for more information.