Configuring LiveUpdate and LiveUpdate Administrator for Broadcom DLP Endpoint hotfixes

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

In DLP 15.7 and beyond, the Administrator Guide outlines new capabilities to utilize LiveUpdate to provide on-demand hotfixing to Endpoint Agents. Within environments where it is required, LiveUpdate Administrator allows locally sourced hosting of updates for DLP Endpoints.  The advantages of this method include increased security, Internet Bandwidth conservation, and additional control over applied and certified hotfixes builds allowed to the Endpoints. This method also allows Endpoints which may exist with no Internet connectivity the ability to hotfix themselves in a "dark" network.

 

Environment

Release : 15.8, 16.0, 16.0.1

Component : Endpoint Prevent, LiveUpdate, LiveUpdate Administrator

Resolution

Important: First review DLP Agent releases available for LiveUpdate

1. Follow the "LiveUpdate for Data Loss Prevention" section in the Administrator Guide relevant to the version of DLP used.

• For DLP 15.8 - see LiveUpdate for Data Loss Prevention.
• For DLP 16.0 - see LiveUpdate for Data Loss Prevention.
• For DLP 16.0.1 - see LiveUpdate for Data Loss Prevention.

2. Configure LUA with the following steps:

• Update the product catalog
  • Log in to the LUA and click Configure
  • Click Update Symantec Product Catalog
    
• Add DLP 15.7 or higher to the product list
  • Log in to LUA and click Configure
  • Click Add New Products
  • Select the desired product line
  • Check each desired product - for example, DLP 15.7 or higher
    
    
    
    
    Create a new download schedule
    
    
  • On the Download & Distribute tab, in the Schedules window, click Add Download.
  • In the Add Download Schedule box, enter the following:
    • Distribution schedule name A descriptive name for this schedule.
    • Status Enabled or Disabled
    • Description Enter a description for this schedule.
  • In the "Select Products" box, click Add.
  • Select the products that you want to add to this schedule and then click Add.
  • In the "Available Components" box, click the component you want to add, and then click Add. Or, click Add All to add all of the product components to the schedule.
  • Select the test status that you want to assign to the schedule.
    By default, the test status is set to Skip Test. Set the status to Must Test to test the updates before you publish them.
  • In the Select Schedule box, set the download schedule.
  • Click OK to save the schedule, or click Cancel to cancel this action.
  • To run a manual download request that is based on an existing schedule. In the right pane, under Schedules, select an existing Download Schedule, and then click Run Now.
    
    
    
    
    Run a new manual download request
  • In the left pane, under Scheduling Tasks, click Manual Download Request.
  • In the Manual Download Request - Step 1 of 2 window, select the products you want to add to this request by clicking Add.
  • In the Select products to be added window, select the product or products you want to add and then click OK.
  • Select the test status for this download request: Skip Test or Must Test.
  • Click Next.
  • In the Manual Download Request - Step 2 of 2 window, select the updates that you want to download. You can select all products and components, or you can select specific components such as Software Updates or Virus Definitions.
  • Click Next to start the download request.
    
    
    
    

Scheduling Distribution
After you've downloaded your updates, they can be sent to either a testing distribution server, or published to a production distribution server where they can be downloaded by your LiveUpdate clients. When you add a distribution schedule, you also select the products and components that you want to associate with the schedule. This list of products and components is compared with the updates in the Manage Updates folder. Any revisions that are not already published will then be published in the current distribution session.

Note: The added products must also be added to the distribution center/s. This is accomplished through Configure > Distribution Centers, then edit an existing distribution center to add to the Product List.

To add a new distribution schedule

1. On the Download & Distribute tab, in the Schedules window, click Add Distribution Schedule.
2. In the Add Distribution Schedule box, enter the following:
   • Distribution Schedule name
   • Status, either Enabled or Disabled
   • Description
3. Select the products and components for which updates will be distributed by clicking Add.
4. In the "Select products to be added" window, select the product or products you want to add to this distribution schedule, and then click Add.
5. In the "Select Product Components" box, select the components that you want to include in the distribution schedule.
6. Click the component name and click Add.
   • Or select all components by clicking Add All.
7. In the "Distribute Content To" box, select the distribution center type, Testing, Production, or both.
8. Select the Distribution Centers. You can select all Distribution Centers, or a subset of the centers.
9. Select a "distribution schedule."
10. Click OK to save the schedule or click Cancel to cancel this action.

 

To run a manual distribution request based on an existing schedule

1. In the right pane, under Schedules, select an existing Distribution Schedule, and then click Run Now.

To run a new manual distribution request

1. In the left pane, under "Scheduling Tasks", click Manual Distribution Request.
2. In the Manual Distribution Request Step 1 of 2 window, click Add to select the products that you want to distribution with this request.
3. In the Select products to be added window, select the products or the components, then click OK.
4. In the "Manual Distribution Request" Step 1 of 2 window, select the "Distribution Center Type": All, All Production Centers, or All Testing Centers.
5. Select the Distribution Center: All, or Subset.
6. Click Next.
7. In the Manual Distribution Request Step 2 of 2 window, select the updates that you want to distribute, and then click Next.

 

Configuring LiveUpdate for Endpoints in DLP Enforce

1. Find the Distribution Center URL desired for the Endpoint Configuration, as follows:
   
   
   
   
2. For above example, distribution URL is: http://##.##.##.##:7070/clu-prod. Make note of this.
3. Navigate to System > Agents > Agent Configuration > Settings page.
4. In Agent Configuration, enter the values in #2 as below: