DLP Detection Server Quick Install Guide for Linux

Products

• Data Loss Prevention
• Data Loss Prevention API Detection for Developer Apps Virtual Appliance
• Data Loss Prevention API Detection Virtual Appliance
• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention Cloud Detection Service for ICAP
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Package
• Data Loss Prevention Cloud Prevent for Microsoft Office 365
• Data Loss Prevention Cloud Service for Discovery/Connector
• Data Loss Prevention Cloud Service for Email
• Data Loss Prevention Cloud Storage
• Data Loss Prevention Core Package
• Data Loss Prevention Data Access Governance
• Data Loss Prevention Discover Suite
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Suite
• Data Loss Prevention Enforce
• Data Loss Prevention Enterprise Suite
• Data Loss Prevention for Mobile
• Data Loss Prevention for Office 365 Email and Gmail with Email Safeguard
• Data Loss Prevention Form Recognition
• Data Loss Prevention Network Discover
• Data Loss Prevention Network Email
• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Monitor and Prevent for Email
• Data Loss Prevention Network Monitor and Prevent for Email and Web
• Data Loss Prevention Network Monitor and Prevent for Web
• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Network Prevent for Email Virtual Appliance
• Data Loss Prevention Network Prevent for Web Virtual Appliance
• Data Loss Prevention Network Protect
• Data Loss Prevention Network Web
• Data Loss Prevention Oracle Standard Edition 2
• Data Loss Prevention Plus Suite
• Data Loss Prevention Sensitive Image Recognition
• Data Loss Protection Oracle Standard Edition

Issue/Introduction

This is a Quick Install guide for the Data Loss Prevention Detection Server

For the full "DLP Quick Install Guides" please visit the following link: DLP Quick Install Guides

Environment

Linux

Cause

The Detection Servers are core components required for Data Loss Prevention.

Resolution

VERSION DISCLAIMER: Please note that the following instructions are version agnostic, and can generally be used on any currently supported version. As such, you will find several variables denoted such as "<DLPversion>" to indicate where a version number "should" be used. You will need to replace these variables with the appropriate version that you are attempting to use. Below are a few examples of such translations... <DLPversion>  = 15.8, 16.0, 16.0.1 or 16.0.2 <DLPfullversion>  = 16.0.10000.60631 <ORACLEversion>  = 193000 or 19.3.0.0 <JREversion> = jdk8u322-b06 or 8u322b06

 

Download Installers: https://support.broadcom.com/group/ecx/productdownloads?subfamily=Data%20Loss%20Prevention
DLP Platform Installer: Symantec_DLP_<DLPversion>_Platform_Lin-IN_<DLPfullversion>.zip

RHEL Developer Subscription:
     RHEL Registration Quick Install Guide for Linux

Firewalld: 

     DLP on RHEL: How to open firewalld ports

DLPInstallers directory:
     - At the root level create a new directory called "DLPInstallers", this will be used to download all of the DLP related software.
          mkdir /DLPInstallers
     
     - Download all of the DLP/Oracle installers and place them into this "DLPInstallers" directory.

Download additional software:
     yum install zip unzip
     - This will install "zip", and "unzip"
     - You may see a message indicating that one or more of these is already installed. That is perfectly fine, you can install any missing utilities and move on.

Install Java:
     Java AdoptOpenJRE Quick Install Guide for Linux

Create the Environment Variables:
     Environment Variables Quick Install Guide for Linux

 

 

Install the DLP Detection Server:
- Copy the "DetectionServer.zip" to the DLPInstallers dir
     unzip DetectionServer.zip
     

- Grant permissions to the files 755
     chmod 755 *.rpm
     

- Install/Confirm the Dependencies
          - Create a new "downloads" directory
               mkdir downloads
          - Run the following YUM command to download the dependencies
               yum install --downloadonly --downloaddir=./downloads *.rpm
          - CD into the downloads directory
               cd downloads
          - Run the following YUM command to install the dependencies
               yum install *.rpm

- Install using the "install.sh" script
     ./install.sh -t detection 
     

- Run the DetectionServerConfigurationUtility

-Navigate to: /opt/Symantec/DataLossPrevention/DetectionServer/<DLPversion> /Protect/install

-Run:
./DetectionServerConfigurationUtility -silent -jreDirectory=/opt/AdoptOpenJRE/<JREversion> -serviceUserOption=NewUser -serviceUserUsername=SymantecDLP -bindHost=0.0.0.0 -bindPort=8100 -fipsOption=Disabled

Add your Detection Server to the Enforce Console:
     - Open the Enforce Web Interface
          https://<enforce>/ProtectManager/Logon
          System > Servers and Detectors > Overview
     - Click on "Add Server"
          Select "Software Server"
     - Select your Detection Server Type:
       
     - Specify the Detection Server Details
       
     Name: The display name of the detection server in the Enforce Console
     Host: Servername or IP Address of the Detection Server
     Port: Port for the detection Server to listen to for Enforce (default is 8100)

     - Save the Server

The Detection Server should report in within a few seconds. If it does not, simply restart the Detection Server Service(Detection Server), and the SymantecDLP Detection Server Controller Service (Enforce).

 

Additional Information

For additional guides please see the "Getting Started with Data Loss Prevention"

To provide feedback please click on the "Feedback" link or send an email to "[email protected]"