Data Loss Prevention

 View Only
Expand all | Collapse all

Update the Symantec Data Loss Prevention from version 10.5 to version 11.5 and to upgrade the operating system on a server with Windows Server 2003 R2 to Windows Server 2008 R2

  • 1.  Update the Symantec Data Loss Prevention from version 10.5 to version 11.5 and to upgrade the operating system on a server with Windows Server 2003 R2 to Windows Server 2008 R2

    Posted Jan 23, 2013 05:32 AM

     

    Tasked to update the Symantec Data Loss Prevention from version 10.5 to version 11.5 and to upgrade the operating system on a server with Windows Server 2003 R2 to Windows Server 2008 R2.

     

    The following components: Endpoint Server, Enforce Server, Network Prevent EMAIL, Network Prevent WEB, Oracle for Symantec DLP, Network Discover. All components are mounted on separatel servers.

     

    How to do it most effectively, saving settings?

     

    Thanks!



  • 2.  RE: Update the Symantec Data Loss Prevention from version 10.5 to version 11.5 and to upgrade the operating system on a server with Windows Server 2003 R2 to Windows Server 2008 R2

    Posted Jan 23, 2013 11:04 AM

    Step one in this case is to upgrade to 11.5 to include your agents and the latest version of Oracle and then implement your OS changeover.

    Most of the data is stored in the Oracle Database such that it does not require a large amount of effort with respect to your detection servers. Unless you have made some customizations such as adding DB providers for SQL scanning then the detection servers can be replaced outright by building their replacements and changing the network address to the new systems in the console.

    For your endpoint this is slightly more complicated since you have agents directed to that server. If you stand up your 11.5 server you can move the agents from the 10.5 server to 11.5 server once you have 11.x implemented.

    For your enforce and DB I would consult the upgrade guide included in the DLP documentation for how to upgrade Oracle and switch bitness if required. The admin guide also includes a migration guide which is essentually doing a cold backup and then a restore to the new server



  • 3.  RE: Update the Symantec Data Loss Prevention from version 10.5 to version 11.5 and to upgrade the operating system on a server with Windows Server 2003 R2 to Windows Server 2008 R2

    Posted Jan 23, 2013 01:28 PM

    Step 1:  read the release and upgrade notes

    Step 2:  repeat step #1

    Step 3: Follow the upgrade notes.

    Step 4: Profit

    Sounds silly but the upgrade and release notes are great for a step by step way of doing things.  The largest part of the upgrade will be the upgrade of Oracle.  

     

    Are you using a Endpoint Management Tool like Altiris?  If you have Altiris there is a task that can help you switch servers for the Endpoitn Agent or you can script a batch file to deliver this via that tool to do the work of switching servers.



  • 4.  RE: Update the Symantec Data Loss Prevention from version 10.5 to version 11.5 and to upgrade the operating system on a server with Windows Server 2003 R2 to Windows Server 2008 R2

    Posted Jan 24, 2013 10:48 PM

    everyone has goos ideas here i wold just add i would go to 11.6.1 so you are on the latest release.