Data Loss Prevention

 View Only
  • 1.  DLP 11.6.2 and Windows Server 2012 R2

    Posted Feb 17, 2015 09:33 PM

    I have a client that wishes to move/migrate their current DLP 11.6.2 Enforce/Oracle server to version 12.5.1 on a virtual server. They have provisioned a VM with Windows Server 2012 R2 build and I know this is now supported with DLP 12.5.1 as of January this year. My original plan was to build an 11.6.2 Enforce/Oracle 11.2.0.3 server on that VM then migrate the physical DB across. I need to know if DLP 11.6.2 (plus Oracle) will install on Windows Server 2012 R2... not really fussed if it's supported or not, just need it to work.

    If it won't then I guess I have a couple of options: upgrade the physical box to DLP 12.5.1 then migrate onto the VM (havng 12.5.1 (and Oracle) already installed or have the VM reprovisoned with Windows Server 2008 R2. Does anyone have any thoughts either way?

    The client is aware and accepts that Oracle is not supported on VMware.

    TIA

    Mark



  • 2.  RE: DLP 11.6.2 and Windows Server 2012 R2

    Broadcom Employee
    Posted Feb 17, 2015 11:19 PM

    from the System requirement guide, 2012 is not supported

    http://www.symantec.com/business/support/index?page=content&id=TECH221605

     

    Microsoft Windows Server 2003 SP2, Enterprise Edition (32-bit)
    ¡ Microsoft Windows Server 2008 R2, Enterprise Edition (64-bit)
    ¡ Microsoft Windows Server 2008 R2, Standard Edition (64-bit)
    ¡ Microsoft Windows Server 2008 R2 SP1, Enterprise Edition (64-bit)
    ¡ Microsoft Windows Server 2008 R2 SP1, Standard Edition (64-bit)
    ¡ Red Hat Enterprise Linux 5.2 through 5.8 (32-bit)
    ¡ Red Hat Enterprise Linux 5.2 through 5.8 (64-bit)

     



  • 3.  RE: DLP 11.6.2 and Windows Server 2012 R2

    Posted Feb 18, 2015 05:06 PM

    I would recommend standing up a test environment, possibly two, before upgrading any component that is in production.

    So, it sound like you have a two tier or single tier environment running on a VM. Just a note, Symantec and Oracle does not recommend Oracle DB on a VM.

    -Provision a new physical server/VM (Win2008)

    -Take a backup of the DB and move/restore it to the new server

    -Backup the cryptomasterkey on Enforce

    -Install Enforce 11.6.2 (Do not initialize the DB) will ask for the Crypto key

    -Upgrade the Enforce to 12, then to 12.5

    Then repeat the process for Win2012

    Note, only Oracle 11.2.0.4 is supported on Win2012 so you may have to upgrade the DB before moving it to Win2012.

    Another alternative is to set up a new environment (Win2012) in parallel. And move your settings and policies etc. over, and then do a cut-over.

     

     



  • 4.  RE: DLP 11.6.2 and Windows Server 2012 R2

    Posted Feb 18, 2015 08:01 PM
    @ Pete Yep, I know :-) @NDeen I've made the client aware of the Oracle DB on VMware issue. They are happy to go with it and accept the consequences should there be any. Thanks for the advice and steps. Just for the hell of it, I've used the VM running Server 2012 R2 as a test environment and installed Oracle 11.2.0.3 and DLP 11.6.2. as far as I can tell there are no issues beyond Oracle telling me that system requirements were not met. Another question: with the upgrade in mind will the existing physical DLP 11.6.2 work OK if I upgrade the Oracle DB to 11.2.0.4?


  • 5.  RE: DLP 11.6.2 and Windows Server 2012 R2

    Posted Feb 19, 2015 09:11 AM
      |   view attached

     

    Here is the updated System Requirements Guide for v12.5.x. Specific editons of Server 2012 and Server 2012 R2 are now supported for DLP servers and Oracle.

    Attachment(s)