Modify the Oracle Listener port number from the default setting (1521) to a different port..

Products

• Data Loss Prevention Enforce

Issue/Introduction

For security reasons, the customer needs to modify the default Oracle listener port number (1521).

Environment

DLP 15.x and 16.x 

Resolution

1. Stop all DLP services in order 
2. Execute the Oracle Net Configuration Assistant on the Oracle machine by navigating to Start > Programs > Oracle_11.x.x.x > Configuration and Migration Tools > Net Configuration Assistant.
Alternatively, you can manually initiate it using the command $ORACLE_HOME/bin/netca.bat.
3. Delete previous Listener as below.

4. Add a new Listener.

5. Select "Use another port number" and input new port number.

6. Select "No".

7. Access Oralce Net Configuration Assistant and Reconfig "Local Net Service Name Configuration".

8. Select "PROTECT" as the service name.

9. Service name is "protect".

10. Select "TCP" as the Network protocol.

11. Host name is DB host name or IP address.
      Select Use another port number and input the new port number.

12. Click Finish.

13. Stop oracle listener service with command "lsnrctl stop".
14. In Oralce installation path *\oracle\product\19.0.0.1\db_1\NETWORK\ADMIN change the pervious port number in "listener.ora" and "tnsnames.ora" files.
15. In "Listener.ora" file, it must has “SECURE_REGISTER_LISTENER= (IPC)” script as below. (If no, add as below)

LISTENER =

  (DESCRIPTION_LIST =

    (DESCRIPTION =

      (ADDRESS = (PROTOCOL = TCP)(HOST = <hostname>)(PORT = 15521))

      (ADDRESS = (PROTOCOL = IPC)(KEY = PROTECT))

    )

  )

SECURE_REGISTER_LISTENER= (IPC)

16. In enforce installation path \SymantecDLP\Protect\config, change "jdbc.dbalias.oracle-thin" option's port number in "jdbc.properties" file.
17. Start listener service with "lsnrctl start" command.
18. Login DB with sysdba and input below two command.

ALTER SYSTEM SET local_listener = '(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=PROTECT)))' SCOPE=both;
ALTER SYSTEM REGISTER;

 

 

19. Start all DLP service in order  and you can check the new port number after 3~5 minutes.