Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Update the Symantec Data Loss Prevention from version 10.5 to version 11.5 and to upgrade the operating system on a server with Windows Server 2003 R2 to Windows Server 2008 R2

Created: 23 Jan 2013 | 3 comments
Personal_GIS's picture

 

Tasked to update the Symantec Data Loss Prevention from version 10.5 to version 11.5 and to upgrade the operating system on a server with Windows Server 2003 R2 to Windows Server 2008 R2.

 

The following components: Endpoint Server, Enforce Server, Network Prevent EMAIL, Network Prevent WEB, Oracle for Symantec DLP, Network Discover. All components are mounted on separatel servers.

 

How to do it most effectively, saving settings?

 

Thanks!

Discussion Filed Under:

Comments 3 CommentsJump to latest comment

John_Gruhn's picture

Step one in this case is to upgrade to 11.5 to include your agents and the latest version of Oracle and then implement your OS changeover.

Most of the data is stored in the Oracle Database such that it does not require a large amount of effort with respect to your detection servers. Unless you have made some customizations such as adding DB providers for SQL scanning then the detection servers can be replaced outright by building their replacements and changing the network address to the new systems in the console.

For your endpoint this is slightly more complicated since you have agents directed to that server. If you stand up your 11.5 server you can move the agents from the 10.5 server to 11.5 server once you have 11.x implemented.

For your enforce and DB I would consult the upgrade guide included in the DLP documentation for how to upgrade Oracle and switch bitness if required. The admin guide also includes a migration guide which is essentually doing a cold backup and then a restore to the new server

jjesse's picture

Step 1:  read the release and upgrade notes

Step 2:  repeat step #1

Step 3: Follow the upgrade notes.

Step 4: Profit

Sounds silly but the upgrade and release notes are great for a step by step way of doing things.  The largest part of the upgrade will be the upgrade of Oracle.  

 

Are you using a Endpoint Management Tool like Altiris?  If you have Altiris there is a task that can help you switch servers for the Endpoitn Agent or you can script a batch file to deliver this via that tool to do the work of switching servers.

Jonathan Jesse Practice Principal ITS Partners