upgrade symantec endpoint protection manager to 14.3

#Upgrade symantec endpoint protection manager to 14.3 install#
#Upgrade symantec endpoint protection manager to 14.3 upgrade#
#Upgrade symantec endpoint protection manager to 14.3 mac#

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program. Symantec Endpoint Protection Manager (SEPM)

#Upgrade symantec endpoint protection manager to 14.3 upgrade#

So, just wondering if there are others in this situation as Broadcom has now butchered a very seamless upgrade process.Symantec, A Division of Broadcom has released updates to address issues that were discovered in the Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Manager (SEPM) products. So there are no issues with the end upgraded result, just a MASSIVE issue with how the upgrade from the SEPM server deploys to a Mac.

#Upgrade symantec endpoint protection manager to 14.3 mac#

This now causes protection issues with the Mac Fleet as they are not running the latest version of the SEP client.įYI - once the end-user clicks all the messages and restarts the Mac, JAMF reapplies the KEXTS and SEXTS for MacOS Approvals, and the SEP client works as expected with all MacOS extension approvals being sorted by JAMF. At this stage, I am not deploying the upgrade to our Mac Fleet from the SEPM server due to these issues. I have raised a Support Case with Broadcom to comment and/or fix this behaviour as it is causing so many issues. I would have attached a document of the displayed messages but there is no facility for this in the Forum.

To clarify, where before the end-user saw a pop-up message to restart at the end of the 'silent' upgrade process - we now see multiple messages displayed to the client before, during, and after as the SEP client is deployed from the SEPM server. The issues now - Since Broadcom have obviously changed the installation process of the latest SEP version 14.3 MP1 from the normal smooth process I have come to expect from Symantec, the end-user on a Mac now has a number of 'technical' hurdles to jump over when the upgrade of the SEP client hits their Mac from the SEPM server. The success of this can be directly attributed to the usual smooth process of an upgrade from the SEPM server as well as all KEXTS and SEXTS already being Approved in the JAMF system for the Mac end-point. The auto-upgrade process to upgrade the SEP client on Mac's went through fine with no issues - even under MacOS Catalina. The last deployment was for version SEP 14.2 RU2 MP1. Previously, auto-deploying the latest SEP client for an upgrade from the SEPM to our Mac fleet (managed by JAMF) has worked fine.

#Upgrade symantec endpoint protection manager to 14.3 install#

When we image a Mac from JAMF and install the latest 14.3 MP1 SEP client all is working fine with all required kernel extensions (KEXT) and system extensions (SEXTS) for the SEP client being applied and approved successfully as set up in our JAMF system. In JAMF we now have the new Broadcom Kernel Extensions installed for auto-approval under MacOS Cataling 10.15.x. Just a quick overview - Our current Mac Fleet is managed by our on-premises JAMF management solution. Just wanting to vent and see if anyone else is in the same boat with the latest SEP client when deploying it from the SEPM Server to Mac's running macOS Catalina.