Symantec Data Loss Prevention Upgrade Guide for Windows

Symantec Data Loss Prevention Upgrade Guide for Windows

Version 15.7

Last updated: April 14, 2022

Symantec Data Loss Prevention Upgrade Guide for Windows

Table of Contents

Preparing to upgrade...........................................................................................................................6

About updates to the Symantec Data Loss Prevention Upgrade Guide....................................................................6 About preparing to upgrade Symantec Data Loss Prevention................................................................................... 6 Symantec Data Loss Prevention upgrade phases....................................................................................................... 7 Preparing the Oracle database for a Symantec Data Loss Prevention upgrade.......................................................8

Checking the database update readiness.................................................................................................................. 8 Preparing to run the Update Readiness Tool......................................................................................................9 Creating the Update Readiness Tool database account...................................................................................13 Running the Update Readiness Tool from the Enforce Server administration console.....................................15 Running the Update Readiness Tool at the command line...............................................................................15 Reviewing update readiness results..................................................................................................................16

Switching from SID to SERVICE_NAME..................................................................................................................18 Switch from SID to SERVICE_NAME............................................................................................................... 18 Register the service name.................................................................................................................................18

Setting ORACLE_HOME and PATH variables......................................................................................................... 19 Set the ORACLE_HOME and PATH variable on Windows...............................................................................19

Confirming the Oracle database user permissions.................................................................................................. 19 About the minimum system requirements for upgrading to the current release....................................................20 Supported upgrade backward compatibility for agents and servers....................................................................... 20 About the requirement for language pack upgrades.................................................................................................21 Upgrade requirements and restrictions.......................................................................................................................21 Preparing your system for the upgrade...................................................................................................................... 22 About external storage for incident attachments.......................................................................................................22 Preparing your environment for Microsoft Rights Management file monitoring.................................................... 23

Prepare the AD RMS environment for RMS monitoring.......................................................................................... 23 Prepare the Azure RMS environment for RMS monitoring...................................................................................... 24

Upgrading to a new release............................................................................................................. 25

Upgrading Symantec Data Loss Prevention............................................................................................................... 25 Downloading and extracting the upgrade software................................................................................................... 26 Migrating the previous version to a new Enforce Server installation...................................................................... 26

Installing the Java Runtime Environment on the Enforce Server.............................................................................27 Installing an Enforce Server..................................................................................................................................... 27 Update the Schema_Objects_Validation_b.sql file if running Oracle 19c................................................................ 31 Running the Migration Utility on the Enforce Server................................................................................................ 31

Silent mode........................................................................................................................................................ 31 Interactive mode.................................................................................................................................................31

2

Symantec Data Loss Prevention Upgrade Guide for Windows

Migrating a previous version detection server to the latest version....................................................................... 32 Installing the Java Runtime Environment on a detection server.............................................................................. 32 Installing a detection server...................................................................................................................................... 33 Running the Migration Utility on a detection server................................................................................................. 35

Migrating previous version data to a new single-tier installation............................................................................ 36 Installing the Java Runtime Environment for a single-tier installation...................................................................... 37 Installing a single-tier server..................................................................................................................................... 37 Running the Migration Utility on single-tier installation.............................................................................................40 Migrate data silently........................................................................................................................................... 41 Migrate data using interactive mode..................................................................................................................41

Verifying that the Enforce Server and the detection servers are running............................................................... 41 Applying the updated configuration to Endpoint Prevent servers...........................................................................42 Upgrading your scanners..............................................................................................................................................42 Upgrading Endpoint Prevent group directory connections...................................................................................... 42 Upgrading WinPcap or installing Npcap for Network Monitor..................................................................................42 Updating an appliance...................................................................................................................................................43

Upgrading Symantec DLP Agents................................................................................................... 44

About Symantec Data Loss Prevention Agent upgrades.......................................................................................... 44 About secure communications between DLP Agents and Endpoint Servers...........................................................45 Generating agent installation packages............................................................................................................ 45 Agent installation package contents.................................................................................................................. 48 Working with endpoint certificates..................................................................................................................... 49 Process to upgrade the DLP Agent on Windows.....................................................................................................49 Upgrading previous version DLP Agents with Windows Safe Mode monitoring enabled................................. 50 Upgrading the Windows agent manually...........................................................................................................50 Upgrading the Windows agent silently.............................................................................................................. 50 Process to upgrade the DLP Agent on Mac.............................................................................................................51 Packaging Mac agent files................................................................................................................................ 52 Upgrading the DLP Agent for Mac manually.................................................................................................... 53 Upgrading DLP Agents on Mac endpoints silently............................................................................................ 54 Confirming that the Mac agent is running......................................................................................................... 55 What gets for DLP Agents on Mac endpoints................................................................................................... 55

Post-upgrade tasks............................................................................................................................ 56

Performing post-upgrade tasks.................................................................................................................................... 56 Verifying Symantec Data Loss Prevention operations.............................................................................................. 56 Enabling Microsoft Rights Management file monitoring........................................................................................... 57

Enabling RMS detection for Azure-managed RMS.................................................................................................. 57 Enabling RMS detection for AD-managed RMS............................................................................................... 58

Migrating plug-ins.......................................................................................................................................................... 58

3

Symantec Data Loss Prevention Upgrade Guide for Windows

About securing communications between the Enforce Server and the database.................................................. 58 About orapki command line options......................................................................................................................... 59 Using orapki to generate the server certificate on the Oracle database.................................................................. 60 Configuring communication on the Enforce Server..................................................................................................61 Configuring the server certificate on the Enforce Server......................................................................................... 63 Verifying the Enforce Server database certificate usage......................................................................................... 63

About remote indexers.................................................................................................................................................. 64 About updating the JRE to the latest version............................................................................................................ 64

Steps to update the JRE.......................................................................................................................................... 64 Backing up the cacerts file....................................................................................................................................... 65 Installing the OpenJRE............................................................................................................................................. 65 Updating the JRE to the latest version on Windows................................................................................................65

Update the JRE using interactive mode............................................................................................................66 Update the JRE using silent mode....................................................................................................................66 Reinstate CA certificates...........................................................................................................................................67 Reverting a JRE version to a previous release........................................................................................................67 Reverting the JRE on Windows........................................................................................................................ 67

Starting and stopping services........................................................................................................ 68

About Symantec Data Loss Prevention services....................................................................................................... 68 Increase the Max Memory........................................................................................................................................ 68 About starting and stopping services on Windows.................................................................................................. 69 Starting an Enforce Server on Windows........................................................................................................... 69 Stopping an Enforce Server on Windows......................................................................................................... 69 Starting a detection server on Windows........................................................................................................... 70 Stopping a detection server on Windows..........................................................................................................70 Starting services on single-tier Windows installations.......................................................................................70 Stopping services on single-tier Windows installations.....................................................................................71

Symantec Data Loss Prevention upgrade troubleshooting and recovery................................... 72

About troubleshooting Symantec Data Loss Prevention upgrade problems..........................................................72 Troubleshooting Enforce Server services...................................................................................................................72 Rolling back to the previous Symantec Data Loss Prevention release................................................................... 72

Reverting the Enforce Server to a previous release................................................................................................ 73 Reverting a detection server to the previous release.............................................................................................. 74 Creating the Enforce Reinstallation Resources file................................................................................................... 74 Creating the Enforce Reinstallation Resources file on Windows............................................................................. 74 Uninstalling a server from a Windows system...........................................................................................................75

Applying a Maintenance Pack.......................................................................................................... 76

Steps to apply a maintenance pack on Windows servers........................................................................................ 76 Downloading the maintenance pack software for Windows servers........................................................................ 76

4

Symantec Data Loss Prevention Upgrade Guide for Windows

Updating the Enforce Server on Windows............................................................................................................... 77 Updating the detection server on Windows..............................................................................................................77 Updating a single-tier system on Windows.............................................................................................................. 77

Copyright statement.......................................................................................................................... 79

5

 ................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download