Chicago (Midwest) Data Loss Prevention User Group

 View Only
Expand all | Collapse all

Symantec DLP Platform Support Question

  • 1.  Symantec DLP Platform Support Question

    Posted Mar 07, 2011 10:36 AM

    Symantec DLP v11 currently supports detection server installation on the following Operating Systems:

    • Windows Server 2003, Enterprise Edition SP2 (32-bit)
    • Windows Server 2008, Enterprise Edition (64-bit) R2 or higher
    • Red Hat Enterprise Linux 5 Update 2 or later

    As of  7/13/2010, Microsoft has discontinued mainstream support for Windows Server 2003 and customers need to buy an Extended Support contract for patching and support. 

    For the next major release of Symantec DLP (year-end 2011, Q1 2012), Product Management is planning to discontinue support for Windows Server 2003 Enterprise Edition and 32 bit versions of Red Hat Enterprise Linux.  Will this be a significant problem for you?  Please let us know your thoughts.

    Curtis Carroll
    Symantec DLP Product Management

     

     

     



  • 2.  RE: Symantec DLP Platform Support Question

    Posted Mar 07, 2011 06:09 PM

    Not all.  Most of my customers have moved past 32 bit on the server and are running 64bit



  • 3.  RE: Symantec DLP Platform Support Question

    Posted Mar 08, 2011 01:10 PM

    We are already running Windows 2008 64-bit and RHEL 5.5 64-bit otherwise in our environment.  I've had to justify to IT Infrastructure why 2003 and especially why 32-bit with DLP's RAM requirements.  Are the Endace DAG 4.5G2 cards for Network Monitor supported on the new platforms?  The product page on the Endace site lists Windows 2003, but not 2008.



  • 4.  RE: Symantec DLP Platform Support Question

    Posted Mar 09, 2011 09:52 AM

    Because Endace has not released APIs for 64-bit Windows, V11 Network Monitor does not support Endace on the platform.  RHEL is the only supported 64-bit platform for Network Monitor with Endace in DLP 11.  

     

    Depending on your requirements, there are several alternative options when upgrading to DLP 11:

    1. The customer needs to stay on Endace
      a. Network Monitor and Endace is a fully supported configuration on 32-bit Windows
      b. Switch to RHEL. Network Monitor and Endace are fully supported configurations for 32-bit and 64-bit Linux
    2. The customer needs to move to 64-bit Windows
      a. Replace Endace with Windows High Speed Packet Capture (new feature for DLP 11). Network Monitor with high speed packet capture will be a fully supported configuration on 64-bit Windows.

    If neither of these options will work, please escalate to Endace Product Management.

    -Curtis Carroll
    Symantec DLP Product Management

     

     



  • 5.  RE: Symantec DLP Platform Support Question

    Broadcom Employee
    Posted Mar 09, 2011 08:23 PM

    Do we support data migration?

    That's mean: now, our customers are runing DLP 10.5 on Windows 32bit, can they export all the data(contains the policy/incident/customized attributes), then import into the newly installed DLP 12 on Windows 64bit?



  • 6.  RE: Symantec DLP Platform Support Question

    Posted Mar 12, 2011 09:05 AM

    Short questions: Which Oracle version required? Will DLP 11 work with Oracle 10.1?



  • 7.  RE: Symantec DLP Platform Support Question

    Trusted Advisor
    Posted Mar 12, 2011 03:51 PM

    DLP V11 is a migration release so it will support Oracle 10.2.4 and also Oracle 11.

    Keep in mind that Oracle is End of Lifing Oracle 10g. So the DLP V12 release will only support Oracle 11.

    My reccomendations to all DLP customers is to either migrate to Oracle 11 now along with the OS to 64bit or you will be required to do it for V12.

    The V11 upgrade documents will walk you through the Oracle Upgrade process to Oracle 11, this is the major aspect of the upgrade for almost 99% of the configurations are in the DB. So this is the most important and difficult area of the upgrade.



  • 8.  RE: Symantec DLP Platform Support Question

    Posted Mar 14, 2011 03:48 AM

    Thank you for recommendation on Oracle. v.11 upgrade documents to Oracle 11 are supplied only with DLP 11 software, right?



  • 9.  RE: Symantec DLP Platform Support Question

    Broadcom Employee
    Posted Mar 14, 2011 03:58 AM

    Yes, it should be available in the setup package.



  • 10.  RE: Symantec DLP Platform Support Question

    Posted Mar 16, 2011 08:42 AM

    My question was (to be clear): is documentation available only in software package or it could be obtained from some other Symantec resource? So far I see that it is only on Fileconnect, which is available for existing customers only.



  • 11.  RE: Symantec DLP Platform Support Question

    Posted Mar 29, 2011 08:47 PM

    I was wondering if of you have seen increased performance in RHEL 64 bit versus 32 bit. We're looking at rolling out with 64 bit because it is an option in one of our regions.



  • 12.  RE: Symantec DLP Platform Support Question

    Posted Apr 05, 2011 03:13 PM

    Symantec Tech Support has told us this has been documented by their team, but not sufficiently widespread to require a fix/patch for v1.

    We're not staging any new NM servers with RHEL 64-bit, even if all other server components are standardized on that platform version. We're using RHEL 32-bit on the NM server in those instances.

    Also appears to be a problem only on Dell server hardware (we haven't been able to recreate it on HP or IBM machines).



  • 13.  RE: Symantec DLP Platform Support Question

    Posted Apr 14, 2011 06:00 AM

    No.

    We use Red Hat Enterprise Linux

    I would apprciate if Windows 2008 Standard 64bit is supported :)