Windows 10 version 1809 endpoints to be managed by ePO 5.3.1

[krit]

Dear all,

A customer would like to manage Windows 10 version 1809 endpoints through an ePO 5.3.1. They have already installed DLPe 11.0.2.1 extension on it.

From the available documents, we have observed that windows 10/1809 endpoints are compatible with DLPe 11.0.600 or later client ( KB68147 ), plus that the DLPe 11.0.600 client release notes do not include ePO 5.3.1 in the "developed for use with" ePO list.

There are two questions regarding this:

1) Would it be ok to install the DLPe 11.0.600 extension on the ePO 5.3.1 and then the DLPe 11.0.600 client, in order to manage windows 10/1809 endpoints?

2) Could the DLPe 11.0.600 be manageable by the current DLPe 11.0.2.1 extension on the 5.3.1 ePO?

Thank you.

Best Regards

[DLP_RS · Accepted solution]

ePO 5.1 and 5.3 will reach End of Life (EOL) on the following dates:
 

Product	EOL Date
ePO 5.1	December 31, 2017
ePO 5.3	March 31, 2019

Ensure your production ePO servers are upgraded to a supported version of ePO prior to the EOL date for that release.

For guidance upgrading ePO, consult the Installation Guide and Release Notes for the version of ePO you are upgrading to, as well as the upgrade checklist (KB81725). 

For product lifecycle details, see the McAfee Product and Technology Support Lifecycle page at: http://www.mcafee.com/us/support/support-eol.aspx.

For End of Life (EOL) policy details, see the Corporate Products EOL policy at: https://www.mcafee.com/enterprise/en-us/assets/misc/support-policy-product-support-eol.pdf.

Definitions:

• EOL period—The time frame that runs from the day McAfee announces product discontinuation, until the last date that McAfee formally supports the product. In general, after the EOL period is announced, no enhancements are made.
• EOL date—The last day that the product is supported, according to the terms of the McAfee standard support offering.

Officially the scenario is not supported. I would recommend upgrading ePO to ePO 5.9.1

[djanuaryjr · Accepted solution]

I would highly recommend upgrading to ePO 5.10 CU3. There are some differences that they would have to get used to, but it is a clean platform. Before upgrading they MUST get to 5.3.3 for DLP to migrate. We learned this the hard way. If can be done without being on 5.3.3 first however, you will run into policy corruption if you try it from anything previous to 5.3.3

I support 20k endpoints globally and we run ENS, DLP, MDE, MNE and manage Avecto through ePO.

We are also running DLP 11.2 which you cannot run on 5.3.1

[krit]

Dear djanuaryjr,

Thanks for the tips. The inplace upgrade with such an long upgrade step is risky.

We will probably set up a brand new ePO 5.10 CU3 and then transfer the endpoints to it.

Best Regards

[djanuaryjr]

That is exactly what we did in our environment.