Data Loss Prevention

 View Only

  • 1.  Compatibility of agents with DLP 14 and oracle question

    Posted Feb 04, 2016 10:25 AM

    1. DLP 14 is compatible with agents 12.0, 12.5 but with 11.5 and 11.6 too?

    2. I have Oracle 11.2.0.2 with DLP 11.6.3 . I can upgrade to DLP 14 and Oracle 11.2.0.4 in one step? or first DLP12, Oracle 11.2.0.3 and then DLP 14, Oracle 11.2.0.4?

     

     

     



  • 2.  RE: Compatibility of agents with DLP 14 and oracle question
    Best Answer

    Posted Feb 04, 2016 10:59 AM

    1.) DLP Agents are simply one major version backwards compatible. So DLP 14 would be compatible with agents 12.0 & 12.5 but NOT with 11.x (11.5 and 11.6 ).

    2.) DLP only supports one major release upgrade. For your 11.6.3 system that would mean you could follow the below upgrade plan:

         (a.) Patch Oracle to 11.2.0.3 & upgrade DLP Enforce + Detection Servers from 11.6.3 --> 12.0

         (b.) Patch Oracle to 11.0.2.4 & upgrade DLP Enforce + Detection Servers from -> 12.0 -> 14.0

         (c.) Upgrade DLP Enforce + Detection Servers from -> 14.0 -> 14.0.1

    To summarize:

    DLP - Go to 12.x & later to 14.x for Enforce & Detection servers. Patch Oracle at each upgrade. Gradually upgrade your clients. Clients are ONE VERSION backwards compatible.

    For Enforce upgrade I prefer the manual upgrade which is quite solid with chances of failure, you simply run the upgrade binary after unzipping:
    https://www-secure.symantec.com/connect/articles/u...

    For Detection server, normally the push upgrade from enforce fails. I would keep a winrar or 7zip handy here as well and follow the same article above. This time unzip the windowsdetectionupgradepackage.jar in the \SymantecDLP\Protect\updates directory and follow instructions on Page # 29 on the upgrade guide below:

    http://clientui-kb.symantec.com/resources/sites/BU...

    I merely tried to outline the process. Do cover the pre-requisites like DB / file / policy backup etc. before proceeding :-)

    Hope this helps!!!



  • 3.  RE: Compatibility of agents with DLP 14 and oracle question

    Posted Feb 04, 2016 11:15 AM

    If I going to have a clean implementation (in other 2 servers install DLP 14) I can take the db of my oracle 11.2.0.2 and put in the db or the new oracle 11.2.0.4? I can do that to mantein all the db?  or at less dont lost the incidents?



  • 4.  RE: Compatibility of agents with DLP 14 and oracle question

    Posted Feb 04, 2016 11:37 AM

    Understand you wish to retain the Database - in that case the path would still remain the same. Cause the existing schema on the Database is of 11.6.3. To be able to use the same database, you would be required to upgrade your Enforce using the supported path above (11.6.3->12.0->14.0) to get the schema upgraded and compatible to be able to work wtih DLP v14.



  • 5.  RE: Compatibility of agents with DLP 14 and oracle question

    Posted Feb 04, 2016 03:12 PM

    Can I upgrade an agent 12.0 to 14.0.1 in one step? Or first 14.0 an then 14.0.1?



  • 6.  RE: Compatibility of agents with DLP 14 and oracle question

    Posted Feb 04, 2016 03:52 PM

    Ideally by replacing the INSTALL command with REINSTALL in the Iinstall_agent bat file helps & it should allow you to move to 14.0.1 directly (see below) to my knowedge. Guess its simply a reinstall technically and not some sort of an upgrade. I personally always recommed a uninstall -> reinstall having witnessed tonnes of issues with this, following most previous versions of this tool. I normally script the upgrades to uninstall (using uninstall string) -> reboot -> return script control & reinstall.

    msiexec /i AgentInstall.msi /q REINSTALL=ALL REINSTALLMODE=vomus

     



  • 7.  RE: Compatibility of agents with DLP 14 and oracle question

    Posted Feb 07, 2016 06:59 AM

    Please note that from DLP 12.0 (Oracle 11.2.0.3) you need to update first to DLP 12.5. and then update Oracle to 11.2.0.4. After you have upgraded Oracle to 11.2.0.4 you can proceed to upgrade to DLP v14.

    DLP 12.5 supports boths versions of Oracle, but v14 supports only 11.2.0.4.



  • 8.  RE: Compatibility of agents with DLP 14 and oracle question

    Posted Feb 08, 2016 04:17 AM

    Hi Team,

    Can any one please help me with DLP documantaion? I need it on urgent bases.

    Thanks

    Ashish



  • 9.  RE: Compatibility of agents with DLP 14 and oracle question

    Broadcom Employee
    Posted Feb 09, 2016 08:20 AM

    From 12.0 to 14.0.1 is not supported in this way although it is supported for most other versions (i.e. 11.x to 12.0 and 12.5 to 14.0.1). DLP 12.5 changed the communication architecture to include the encryption key structure to a certificate use. In this case a simple REINSTALL=ALL would not account for that change.