Data Loss Prevention

Hello.  Has anyone gone through the tedious process of upgrading/migrating dlp 11.5 on windows 2003 server (32-bit) to dlp 14 windows server 2008 (64-bit)?  After ironing out the upgrade path (which will be beyond tedious & will involve deploying a staging environemnt to get to 64-bit first) w support, we're now looking at deploying a new windows 2012 r2 hyper-v environment & leaving the old enviornment out of the mix.  We'd like to migrate policies, IDM & EDM data as it's been explained that the upgrade path from 11 to 14.6 requies multiple database upgrades. So basically, we'll be leaving all legacy data (incidents, etc) behind on the old old environment.  This occurred as the dlp environment was not upgraded for years - digging out. 

You can move you 11.5 32-bit DLP environment to a Windows 2008 64-bit server (like a usual reinstall). Then upgrade 11.5 version to the current version step-by-step (11.5 -> 12 -> 12.5 -> 14.0 -> 14.5 -> 14.6).

Yes. Thanks so much for this.  My company is looking at literally ditching the upgrade process though and installing a new virutalized 14.0/6 environment.  Do you know of any way to get the policies over from 11 to 14?  Their under a tight deadline and we literally have 12 dlp servers and the agents are embedded on all of our desktops

For the upgrade it will be a conversion from x86 to x64 and then you would only need to do the major versions for the upgrade path. So in your case it would be 11.5 -> 12.0 -> 14.0 -> 14.6 for the upgrade path. You would also need to upgrade Oracle from 11.2.0.3 to 11.2.0.4. Given that its probably best to ditch the upgrade process since if it has not been maintained then it probably also means that the policies themselves are now out of date as well. If you dont have that many policies then its likely that they are stock policy templates which are easy enough to redeploy.

Old 11.5 agents are not compatible with new versions of DLP. You'll need to upgrade all agents. If you've already done this, and only need to transfer policies, you can export each policy as a template and import then in a new environment.

But you need to manually add all Data Identifiers, Response Rules etc.

Thanks.  In refernce to the agent upgrades... uninstall the agents and then reinstall?  Our clients are windows 7

I think it's better to remove old agents before installing new ones. 

Agents since DLP v. 12.5 have new installation and communication features.