This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Promote Remote SEC to Primary SEC

Hello,

We are planning a migration from Windows 2008r2 to Windows 2016. We would like to run the two systems in parallel with the Windows 2016 host acting as a remote SEC. When ready, we'd like to decomm the 2008r2 server and promote the 2016 SEC as the primary manager.

Does Sophos support "promoting" a remote SEC to primary?

This thread was automatically locked due to age.

Parents

0 MEric over 5 years ago

Hi Ntrepid,

You can run two servers with SEC and their own database without issues. Each endpoint can only connect to one SEC server. When both SECs are running you can slowly migrate your endpoints to the Windows 2016 SEC server by pushing out an endpoint redirection script to them via start-up GPO. Once all the endpoints are migrated over you can decommission your Windows 2008 R2 server.
Redirection script: https://community.sophos.com/kb/en-us/116737

A guide for setting up your Windows 2016 server can be found here: https://docs.sophos.com/esg/enterprise-console/5-5/help/en-us/PDF/sec_55_mgeng.pdf
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 MEric over 5 years ago

Hi Ntrepid,

You can run two servers with SEC and their own database without issues. Each endpoint can only connect to one SEC server. When both SECs are running you can slowly migrate your endpoints to the Windows 2016 SEC server by pushing out an endpoint redirection script to them via start-up GPO. Once all the endpoints are migrated over you can decommission your Windows 2008 R2 server.
Redirection script: https://community.sophos.com/kb/en-us/116737

A guide for setting up your Windows 2016 server can be found here: https://docs.sophos.com/esg/enterprise-console/5-5/help/en-us/PDF/sec_55_mgeng.pdf
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data