Restore the DLP Enforce Server across platforms in three-tier deployments

Products

• Data Loss Prevention Enforce

Issue/Introduction

Please note:

This article covers the legacy method utilized in DLP 16.1 and previous.

25.1 and later newer utilizes the new Enforce Server Live Backup methodology which is a more robust method backing up more than just your encryptions keys.

Please see:

Live Backup 25.1:
https://techdocs.broadcom.com/us/en/symantec-security-software/information-security/data-loss-prevention/25-1/maintaining-the-dlp-system/backing-up-and-recovering-on-windows/configure-the-enforce-server-live-backup.html

26.1:
https://techdocs.broadcom.com/us/en/symantec-security-software/information-security/data-loss-prevention/26-1/maintaining-the-dlp-system/backing-up-and-recovering-on-windows/configure-the-enforce-server-live-backup.html

Recovering the Enforce Server 25.1

https://techdocs.broadcom.com/us/en/symantec-security-software/information-security/data-loss-prevention/25-1/maintaining-the-dlp-system/backing-up-and-recovering-on-windows/about-windows-system-recovery/about-recovering-your-system-on-windows-platforms/recovering-the-enforce-server-on-windows.html

Recovering the Enforce Server 26.1

https://techdocs.broadcom.com/us/en/symantec-security-software/information-security/data-loss-prevention/26-1/maintaining-the-dlp-system/backing-up-and-recovering-on-windows/about-windows-system-recovery/about-recovering-your-system-on-windows-platforms/recovering-the-enforce-server-on-windows.html

 

16.1 and previous

By leveraging the EnforceReinstallationResources.zip, you can restore a Symantec Data Loss Prevention (DLP) Enforce configuration and database access onto the same, or different, platform. In three-tier deployments, you install the Oracle database, Enforce Server, and a detection server on separate computers.

 

Environment

• Windows
• Linux

Ensure that the target OS platform is supported prior to uninstalling DLP Enforce.

Resolution

To migrate your Enforce Server to another OS platform, follow these high-level steps. See the Symantec Data Loss Prevention Installation Guide appropriate to your version for specific instructions on how to create and use the reinstallation resources files, as well as for the appropriate path names. 

1. Stop DLP Enforce services for your specific version

2. On your current Enforce Server, create the EnforceReinstallationResources.zip file.

   1. See the chapter "Uninstalling Symantec Data Loss Prevention" for the section "Creating the Enforce Reinstallation Resources file on Windows" or the section "Creating the Enforce Reinstallation Resources file on Linux" in the Symantec Data Loss Prevention Installation Guide for your version for detailed instructions on creating this file.

3. Copy the EnforceReinstallationResources.zip file to your new Enforce Server computer.

4. On your new Enforcer Server computer, install the Enforce Server, but do not initialize the Enforce Server database.

5. Use the EnforceReinstallationResources.zip file during the installation procedure to preserve the connection to your existing database. See the chapter "Installing an Enforce Server" in the Symantec Data Loss Prevention Installation Guide for your version for detailed instructions on using reinstallation resources.