how to upgrade the Endace drivers

Products

• Data Loss Prevention Network Monitor

Issue/Introduction

I need to upgrade my Endace drivers.  What are the steps to do it?

Resolution

- First of all, you must download the updated Endace drivers from https://support.endace.com/. See TECH220323 for what drivers are supported with Symantec Data Loss Prevention products.

- Copy these advanced settings from the Network Monitor server. You can see them on the DLP web interface: System -> Servers -> Overview -> Server Settings
   
 PacketCapture.ENDACE_BIN_PATH
 PacketCapture.ENDACE_LIB_PATH
 PacketCapture.ENDACE_XILINX_PATH
 PacketCapture.IS_ENDACE_ENABLED

- Change their settings as default (see the on-line help). To change their setting you have to click on "configure" (top left) and change the value.

- Recycle the Network Monitor.

- Go into the System -> Servers -> Overview -> Network Monitor -> Configure -> Packet Capture and remove the Endace card (if it is still listed); to remove it you just need to "uncheck" the Dag0.

- Recycle the Network Monitor.

- Remove the old and install the new ENDACE drivers (follow the Endace documentation). The Endace documentation is a third-party manual.

- Reboot the Network Monitor server.

- Change back the 4 Endace card advanced settings on the Network Monitor  (and also verify if the value is correct).

- Recycle the Network Monitor.

- Go into the DLP web interface: System -> Servers -> Overview -> Network Monitor -> Configure -> Packet Capture and enable the Endace card (usually is Dag0); to enable it you just need to "check" the Dag0.

- Recycle the Network Monitor.

Wait 15 minutes and check if the Network Monitor server is able to process the network traffic.