Symantec Data Loss Prevention updates can be in the form of different release types. The purpose of this article is to explain the various release types and their impact on your Data Loss Prevention deployment.
There are four different release types:
Each of these release types is described in the following section.
The Symantec Data Loss Prevention release types have the following characteristics:
Major Release. Includes new features and functionality changes. Typically includes database schema changes. Includes new SKUs. Example: 14.0.
Minor Release. Includes new features and functionality changes. Can include database schema changes. Includes new SKUs. The scope of change in a Minor Release is typically not as extensive as in a Major Release. Examples: 14.5, 14.6.
Release Update (RU). Can include new features and functionality changes. There are no new SKUs for Release Updates. RUs typically don't include database schema changes, but may on occasion. A Release Update is an upgrade from the most recent minor version of a product. Example: 14.6.1 (hypothetical; there is no actual release with this version number at this time).
Hotfix. Hotfixes contain a fix for a single issue. A hotfix will be built upon an existing Minor Release or Maintenance Pack. Example: 15.8.0203. Hotfixes can be either Public or Private. Private hotfixes are typically issued for problems that have a narrow impact, such as an individual application conflict. Public hotfixes are typically issued for wider impact, such as a browser update affecting performance or functionality. Private and Public hotfixes are cumulative, each hotfix, private or public, will contain all prior private and public hotfixes.
Maintenance Pack (MP). Maintenance Packs do not include new features, though additional platform support may be added for the Enforce Server, detection servers, and DLP Agents. Maintenance Packs contain only defect fixes, described in the Release Notes accompanying a Maintenance Pack. A Maintenance Pack consolidates hot fixes and contents of previous Maintenance Packs. Examples: 14.5 MP1, 14.6 MP1.
NOTE: Maintenance Packs for Data Loss Prevention were released beginning with version 14.5. Prior to version 14.5, the "Release Updates" for Data Loss Prevention, such as version 14.0.2, conformed to the definition of what are now regarded as "Maintenance Packs." Use of "Maintenance Packs" to apply to Data Loss Prevention releases makes Data Loss Prevention release definitions consistent with those of other Symantec products.
Because Maintenance Packs are restricted to defect fixes only, with no changes to feature or the database schema, Symantec recommends that you apply Maintenance Packs immediately after they are released, and with minimal qualifying (as compared with other types of releases) in a Test environment. Applying a Maintenance Pack ensures that your Data Loss Prevention environment is up to date, and optimizes technical support for your deployment.
While Symantec recommends updating DLP Agents and servers to the same MP level, DLP Agents that have been updated to the latest MP can communicate with servers that have not been updated, as long as the Agents and servers are at the same version (that is, the same major, minor, or RU version) independent of the MP. There can be exceptions to this guidance, such as 15.7MP2 which required the Enforce and Endpoint Servers to be upgraded to 15.7MP2 prior to updating agents to 15.7MP2.