Showing results for 
Show  only  | Search instead for 
Did you mean: 

How to perform an Automatic Migration from legacy McAfee products to Endpoint Security


This document is a continuation of How to perform a migration from legacy McAfee products to Endpoint Security - Getting Started. Please refer to that document first.

Install the Migration Assistant

The Migration Assistant extension is required only for migrating legacy settings to Endpoint Security. It is not part of the Endpoint Security product extension package. You must install it on your McAfee ePO server as a separate extension if you plan to migrate.

  1. In McAfee ePO, select Menu | Software Manager | Software Not Checked In.
  2. On the left side of the Software Manager screen, under Product Categories, select Endpoint Security, then:
    1. In the Software section, select McAfee Endpoint Security 10.1.
    2. In the Component section, click Check In to check in the Migration Assistant extension to your McAfee ePO. When installation is complete, the Migration Assistant is listed on the Extensions screen.


Performing the Automatic Migration

Use automatic migration to migrate all the policies and client tasks for your legacy products. The Endpoint Migration Assistant creates and assigns the new Endpoint Security policies and client tasks automatically, based on your current product settings. This migration path requires minimal input from you.

Automatic migration also migrates the entries in your legacy Host IPS Catalog to the new Endpoint Security Firewall Catalog.

1.     In McAfee ePO, select Menu | Policy | Endpoint Migration Assistant.


2.     If you have VirusScan Enterprise installed, also select either Workstation or Server. Select one to migrate now, then use manual migration to migrate the other at a later time.


3.     Click Next to generate a preview of the new Endpoint Security policies. A progress bar appears and lets you know how many policies are being included in the preview.

     a.     Review the new policies.

    1. Under New Categories in the left pane, select a category, then preview the new policies for that category in the right pane.
    2. (Optional) For every new policy that is created under Endpoint Security, click Rename and Edit Notes to rename the policy or edit the policy notes, if needed. See Policy names and notes for information about conventions used.

4.     Click Save to run a server task to complete the migration. (To cancel the migration, click Cancel.) Client tasks and the Host IPS Catalog are also migrated. The migration process may append a "-1" to the end of a policy if that policy name already exists.


5.     The migration assistant runs a server task to migrate your settings in the background. The server task must complete before you can perform another migration. You can check your migration status by going to the Server Task Log.

Verify automatically migrated objects

After your migration is complete, you can view the completed objects and verify that they are configured correctly.

You can review your new settings in the following locations:

  • Policy Catalog
  • Client Task Catalog
  • Firewall Catalog

Manual Migration

If there are policies that were not migrated in the Automatic Migration, you can use the manual migration to migrate the remaining policies.

  • Manual migration is a "hands-on" process. You make most of the migration decisions by selecting the objects to migrate and editing their settings, if needed.
    • It is recommended for:
      • Networks with more than 250 managed systems
      • Customers who use multiple custom policies.
      • Customers who want to fine-tune existing policy settings during the migration process.
      • Customers who want to fine-tune assignments.
      • Customers who want to personally supervise and approve each step of the migration process.
    • Benefits
      • Lets you select each policy and client task to migrate
      • Lets you edit the settings for each policy or client task to migrate
    • Cautions
      • Requires more input from you
      • Does not retain assignments. You need to assign policies and client tasks to managed systems
      • Does not migrate the Host IPS Catalog
    • Click here for the Manual Migration Guide

Wrapping Up

The new Endpoint Security Migration Assistant makes migrating from legacy products a simple process. With both an automatic and manual mechanism for migration, it provides the flexibility necessary for any organization to quickly and efficiently migrate to Endpoint Security. For more information, please take a look at the Endpoint Security 10.1 Migration Guide.

Tags (2)
Version history
Revision #:
1 of 1
Last update:
‎03-21-2016 09:01 PM
Updated by:

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community