Data Loss Prevention

 View Only
  • 1.  Data Loss Prevention DLP and Oracle RAC 11 or 12c

    Trusted Advisor
    Posted Oct 13, 2015 08:28 PM

    Hello DLP Users,

    I wanted to share some information on how to get DLP to be installed with Oracle RAC.

    Either with version Oracle 11g RAC or Oracle 12c RAC.

    **** First of all Oracle RAC is NOT supported by Symantec and has NOT been certified or tested at all. So please make sure that you have a strong DBA with Oracle knowledge if you move forward with this at your own risk. ****

    Keep in mind that if you have Oracle RAC, I assume you have a team of DBA's to help with the installaiton and configuration.

    Also keep in mind that some of these steps will require you to circumvent the installation process in order for it to install correctly.

    There are a couple different approcahes that I have done when installing on Oracle RAC, and will outline them as to how this was done.

    Oracle 11g RAC - Tried this DLP V11.x

    1. Install Oracle as outlined in the installation manual, make adjustments as necessary for Oracle RAC if needed. (Use the DBT File and user creation scripts)
    2. Connect to the DB and Run Sqlplus command “select * v$version;” and record the output for the instance name.
    3. Open Task Manager
    4. Start the installation program normally (Run as Admin)
    5. When it asks for the DB SID in the installer
    6. Point the Installer to the “select * v$version;” output for the instance name.
    7. It should then try to connect to the DB and it will take longer than it would if it failed.
    8. Open up the Task Manager and Kill the sqlplus process that the installer runs. - You may need to do try this more than once.
    9. Do NOT start the Vontu Services and change the jdbc.properties file (SymantecDLP\Protect\config. Comment out the connection line and update it with the Service Name style of string. Make sure to change the Host and Connect Data portion.
    10. jdbc.dbalias.oracle-thin=@(description=(address=(host=FQDN_DB_SERVER_NAME)(protocol=tcp)(port=1521))(connect_data=service_name=DB_SERVICE_NAME)))
    11. Then reboot the server and it should come up and connect to the DB.

    ***** THIS WILL NOT WORK IN A MULTI-TENANCY ORACLE 12C SYSTEM (I tried this and it will just not work during the installaton process) ********

    Oracle 12c RAC - Tried this with DLP v14 (NOT VERIFIED)

    This process requires you to copy a file and edit the contents, and then replace the file before the installer starts. This may even work for Oracle 11g

    Install Oracle as outlined in the installation manual, make adjustments as necessary for Oracle RAC if needed. (Use the DBT File and user creation scripts)

    1. Start the installation program normally (Run as Admin)
    2. Go to the Users Directory that is running the Installer - C:\Users\[username]\AppData\Local\Temp
    3. Look for the most recent directory created or modified - This is the Temp installation directory created when you run the installer.
    4. Inside that directory look for the following file name "i4jparams.conf" (Note the Directory Name for later)
    5. Copy that file to your desktop
    6. Cancel the DLP Installation Program
    7. Edit and save the file using notepad and do a search and replace for the following "sid=$" replace with "service_name=$"
    8. Now start the DLP Installer again, and make sure to replace the NEW i4jparams.conf file into the directory where it is being extracted to. You will need to complete this before the first Symantec Splash screen comes up (During the Extracting process)
    9. Follow the installation process as normally, just fill in the SID with the service name that you would use to connect to the DB.
    10. Do NOT start the Vontu Services and change the jdbc.properties file (SymantecDLP\Protect\config. Comment out the connection line and update it with the Service Name style of string. Make sure to change the Host and Connect Data portion.
    11. jdbc.dbalias.oracle-thin=@(description=(address=(host=FQDN_DB_SERVER_NAME)(protocol=tcp)(port=1521))(connect_data=service_name=DB_SERVICE_NAME)))
    12. Then reboot the server and it should come up and connect to the DB.

     

    Good Luck!!

    Ronak

     



  • 2.  RE: Data Loss Prevention DLP and Oracle RAC 11 or 12c

    Posted Oct 14, 2015 03:50 PM

     

    Ronak,

    Great job on the post, is there a reason you made it a forum post and not a blog post or something?  I think it should be moved there

     



  • 3.  RE: Data Loss Prevention DLP and Oracle RAC 11 or 12c

    Posted Oct 14, 2015 04:32 PM

    We've been looking for this exact information, thank you!



  • 4.  RE: Data Loss Prevention DLP and Oracle RAC 11 or 12c

    Posted Oct 15, 2015 09:42 AM

    Darn Good Ronak. I agree this would be better off as an Article or blog



  • 5.  RE: Data Loss Prevention DLP and Oracle RAC 11 or 12c

    Trusted Advisor
    Posted Oct 15, 2015 12:41 PM

    I juts submitted it as an Articke.. I was worried if it would be approved.

    Fingers crossed.

    FYI.. Oracle 12c Multi-tenancy is a bust!

    I believe that it will work on 12c Oracle single instance.. was not able to test it out.