Data Loss Prevention

 View Only

Three-Tier Installation of DLP Product 

Nov 25, 2012 09:07 AM

Symantec Data Loss Prevention supports three different installation types:

three-tier, two-tier, and single-tier

Single-Tier: To implement the single-tier installation, you install the Oracle Database, the Enforce Server, and a detection server all on the same computer. Use single-tier installation only for testing or risk assessment purpose.

Two-Tier: To implement the two-tier installation, you install the Oracle Databse and the Enforce Server on the same computer. You then install detection server on a separate computer.

Three-Tier: To implement the three-tier installation, you install the Oracle Database, the Enforce Server, and a detection server on separate computers.

The Three-Tier installations require that you install the Oracle Client (SQL*Plus and Database Utilities) on the Enforce Server to communicate with the Oracle server.

Here are the steps to perform a three-tier installation:

1. Prepare three servers: server1 used for the Oracle Databese, server2 used for the Enforce, and server3 for the detection server.

2. Install Oracle and create the Symantec Data Loss Prevention database on server1. See the 'Symantec Data Loss Prevention Oracle 11g Installation and Upgrade Guide' for information about install Oracle Database.

3. On server2, you need to install Oracle Client.

Choose 'Custom' for the installation type:

4. For the product components, select 'Oracle Database Utilities', 'SQL*Plus' and 'Oracle Net':

5. Copy the tns configuration file from server1 (located on: \\server1\c$\app\Administrator\product\11.2.0\dbhome_1\NETWORK\ADMIN\tnsnames.ora) to server2 (copy to: \\server2\C:\app\Administrator\product\11.2.0\client_1\network\admin).

6. From server2, open command line, then, run the command: tnsping protect, make sure the command run successfully:

7. Install DLP Enforce on server2:

8. For the Oracle Database Server Information, input the hostname of the Oracle Database, which is the hostname of server1:

9. For the information of Oracle Database User Configuration, input the 'User Name' as 'protect':

10. Finish the installation of DLP Enforce on server2.

11. On server3, install Detection Server by run the same installation file of DLP Enforce, but, choose 'Detection' as Server Components:

12. Add server3 as a detection server on DLP Enforce Console.

DONE!

Statistics
0 Favorited
57 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Comments

Jan 07, 2015 10:39 AM

maybe someone can help me here. Im trying to complete our DLP package setup. We have a 3 tier install and i need to be able to install network discover and prevent for email and web. I registered discover as a signle tier install in the management console but its not talking to anything is there anything that i am missing. please advise hope it makes sense

Dec 08, 2014 05:19 AM

Hi
The oracle is not able to connect and it is not able to recognize the listener
Please advise how to troubleshoot it
Thx

Dec 08, 2014 05:19 AM

Hi
The oracle is not able to connect and it is not able to recognize the listener
Please advise how to troubleshoot it
Thx

Aug 11, 2014 05:26 AM

Good Article 

Jun 22, 2014 02:37 PM

Thank you for your informative article!

Oct 06, 2013 09:50 AM

The three-tier installation is installing Oracle DB, Enforce Server and Detection Server on 3 servers.

And, the two-tier installation is installing Oracle DB and Enforce Server on one server, and, install Detection Server on another server.

So, the installation method of the Detection Server has no difference.

Jul 30, 2013 04:46 AM

Yang,

very nice but not complete as Enforce and detection installation not shown complete.

Apr 29, 2013 12:24 AM

Nice article.. Thanks for sharing ..

Thumbs up for this article.

Feb 27, 2013 06:34 AM

Screen-shot shows easy way to understand how to install enforcer and detaction server for DLP first time installation.

Good article.

Related Entries and Links

No Related Resource entered.