Installing patches for the on-prem SEDR appliance

Products

• Endpoint Detection and Response
• Endpoint Detection and Response Hardware
• Endpoint Detection and Response with Network and Email
• Endpoint Protection with Endpoint Detection and Response
• Endpoint Detection and Response with Network Sensor
• Endpoint Detection and Response with Email

Issue/Introduction

Broadcom has released a patch for a known issue that you would like installed on your on-prem SEDR (Symantec Endpoint Detection and Response) appliance.

Environment

SEDR 4.x

Resolution

1. At the admin CLI of EDR, type:
   

   show -v

2. Make sure the patch you are wanting to apply matches Version and build.  To confirm the installed patches, type:
   

   patch list -v atp-patch-4.x.x-x

   The patch version and description will appear in the output.
3. If patch version does not appear in the download repository, please contact support for further assistance and reference KB #. Also copy and paste the output from this command into the case comments.
4. To download the patch, type:
   

   patch download atp-patch-4.x.x-x

   If the last three lines from patch download are not as follows, create a support case and paste the output into the case comments.
   
   Example: 
   

   atp-patch-4.x.x-x.x86_64.rpm                               | 718 kB   00:01 ETA
      Download succeeded
      Function: main returned success
   

5. To install the patch, type:
   

   patch install atp-patch-4.x.x-x

6. If patch install does not include the following two lines, create a new support case and copy and paste the output from the patch install command into the comments.
   

   Patch installation Success!
   Function: do_install returned success

Additional Information

Patches are specifically designed and validated for the particular SEDR version they were built against. This means a patch created for SEDR 4.5.x will only function correctly on SEDR 4.5.x installations and is not compatible with earlier or later versions.

Subsequent major versions of SEDR will inherently incorporate all patches from previous versions. For instance, if you are running SEDR 4.6.x or any newer version, it will automatically include all the fixes and enhancements that were released as patches for SEDR 4.5.x.