I need to upgrade my Endace drivers. What are the steps to do it?
- First of all, you must download the updated Endace drivers from https://support.endace.com/. See TECH220323 for what drivers are supported with Symantec Data Loss Prevention products.
- Copy these advanced settings from the Network Monitor server. You can see them on the DLP web interface: System -> Servers -> Overview -> Server Settings
PacketCapture.ENDACE_BIN_PATH
PacketCapture.ENDACE_LIB_PATH
PacketCapture.ENDACE_XILINX_PATH
PacketCapture.IS_ENDACE_ENABLED
- Change their settings as default (see the on-line help). To change their setting you have to click on "configure" (top left) and change the value.
- Recycle the Network Monitor.
- Go into the System -> Servers -> Overview -> Network Monitor -> Configure -> Packet Capture and remove the Endace card (if it is still listed); to remove it you just need to "uncheck" the Dag0.
- Recycle the Network Monitor.
- Remove the old and install the new ENDACE drivers (follow the Endace documentation). The Endace documentation is a third-party manual.
- Reboot the Network Monitor server.
- Change back the 4 Endace card advanced settings on the Network Monitor (and also verify if the value is correct).
- Recycle the Network Monitor.
- Go into the DLP web interface: System -> Servers -> Overview -> Network Monitor -> Configure -> Packet Capture and enable the Endace card (usually is Dag0); to enable it you just need to "check" the Dag0.
- Recycle the Network Monitor.
Wait 15 minutes and check if the Network Monitor server is able to process the network traffic.