Symantec — Endpoint Protection Upgrade 14.2 To 14.3

Even with perfect planning, issues arise. Here are solutions to the most frequent problems during the 14.2 to 14.3 transition.

| Issue | Likelihood | Mitigation | |-------|------------|-------------| | Database upgrade fails (SQL compatibility) | Medium | Ensure SQL is at least 2016, run DBCC CHECKDB pre-upgrade. | | Client communication breaks after SEPM upgrade | Low | Restart Symantec Management Service; check firewall port 8014. | | Custom policies lost or reset | Low | Export all policies before upgrade as XML backup. | | High memory usage post-upgrade (Java console) | Medium | Increase SEPM heap size (set SEPM_JVM_MAX_MEMORY). | | 14.3 client fails on Windows 7 / old OS | High | Do not upgrade – keep 14.2 client or retire the OS. |


If critical clients fail to upgrade or the SEPM becomes unstable: symantec endpoint protection upgrade 14.2 to 14.3

Downgrade is not supported – you cannot simply overwrite 14.3 with 14.2. Always test in a non-production environment first.

# On client
"%ProgramFiles%\Symantec\Symantec Endpoint Protection\smc" -stop
"%ProgramFiles%\Symantec\Symantec Endpoint Protection\smc" -start

| Activity | Duration | |----------|----------| | Pre-upgrade backup & health check | 2–4 hours | | SEPM upgrade | 30–60 minutes | | Client upgrade (phased) | 3–10 days (depending on scale) | | Post-validation & testing | 1–2 days | | Total project | 1–2 weeks | Even with perfect planning, issues arise


Option A – Push upgrade via SEPM (recommended for scale)

Option B – Manual / scripted

Option C – GPO / WSUS (for unmanaged clients)

Export the 14.3 Windows client MSI from the SEPM: Admin > Install Packages > Export Client Install Package If critical clients fail to upgrade or the

Deploy via your software distribution tool.