DLP Enforce Server Quick Upgrade Guide for Linux

Products

Data Loss Prevention API Detection for Developer Apps Virtual Appliance Data Loss Prevention API Detection Virtual Appliance Data Loss Prevention Cloud Detection Service Data Loss Prevention Cloud Detection Service for ICAP Data Loss Prevention Cloud Detection Service for REST Data Loss Prevention Cloud Package Data Loss Prevention Cloud Prevent for Microsoft Office 365 Data Loss Prevention Cloud Service for Discovery/Connector Data Loss Prevention Cloud Service for Email Data Loss Prevention Cloud Storage Data Loss Prevention Core Package Data Loss Prevention Data Access Governance Data Loss Prevention Discover Suite Data Loss Prevention Endpoint Discover Data Loss Prevention Endpoint Prevent Data Loss Prevention Endpoint Suite Data Loss Prevention Enforce Data Loss Prevention Enterprise Suite Data Loss Prevention for Mobile Data Loss Prevention for Office 365 Email and Gmail with Email Safeguard Data Loss Prevention Form Recognition Data Loss Prevention Network Discover Data Loss Prevention Network Email Data Loss Prevention Network Monitor Data Loss Prevention Network Monitor and Prevent for Email Data Loss Prevention Network Monitor and Prevent for Email and Web Data Loss Prevention Network Monitor and Prevent for Web Data Loss Prevention Network Prevent for Email Data Loss Prevention Network Prevent for Email Virtual Appliance Data Loss Prevention Network Prevent for Web Virtual Appliance Data Loss Prevention Network Protect Data Loss Prevention Network Web Data Loss Prevention Oracle Standard Edition 2 Data Loss Prevention Plus Suite Data Loss Prevention Sensitive Image Recognition

Issue/Introduction

This is a Quick Upgrade Guide for the Data Loss Prevention Enforce Server

For the full "DLP Quick Upgrade Guide" please visit the following link: DLP Quick Upgrade Guide

Environment

Linux

Cause

The Enforce Server is a core component required for Data Loss Prevention.

Resolution

Download Installers: https://support.broadcom.com/group/ecx/downloads "Please note, you must log in to the portal and navigate to Data Loss Prevention"
DLP Platform Installer: Symantec_DLP_<version>_Platform_Lin-IN_<full version>.zip
Oracle Client Installer: LINUX.X64_193000_client.zip
** The Oracle Client MUST be installed if Oracle is not installed locally on the Enforce Server.
** The Oracle Client version MUST match the Database version.
** If upgrading the Oracle client you must uninstall the current version, then reinstall the updated version.

DLPInstallers directory:
1. At the root level create a new directory called "DLPInstallers", this will be used to download all of the DLP related software.
mkdir DLPInstallers

2. Download all of the DLP/Oracle installers and place them into this "DLPInstallers" directory.

Install New Version of Java:
Java AdoptOpenJRE Quick Install Guide for Linux

Update the Oracle 19c Client:
Oracle 19c Client Quick install Guide for Linux

Update the Environment Variables:
Environment Variables Quick Install Guide for Linux

Stop any running Oracle Jobs:
- Run the following SQL statement on your Oracle Database:

     select count(*) from user_jobs;

If the job's are not 0 refer to the following:
Stopping Oracle Database Jobs

Run the UpgradeReadinessTool:
Quick URT Guide

Install the new version of the Enforce Server:
** Note: This is a parallel installation and will exist at the same time as the previous version of DLP.
Enforce Quick Install Guide for Linux: Enforce Quick Install Guide for Linux

Run the Migration Phase:
1. Navigate to: opt/Symantec/DataLossPrevention/EnforceServer/16.0.00000/Protect/Migrator
cd /opt/Symantec/DataLossPrevention/EnforceServer/16.0.00000/Protect/Migrator
** Be sure to extract the URT to the following dir: "/opt/Symantec/DataLossPrevention/EnforceServer/16.0.00000/Protect/Migrator/URT" or the Migration will fail

2. Run the MIgration "migrateEnforce.sh"
./migrateEnforce.sh

Confirm the JRE Path: y
Proceed with Phase 1 Migration: y
Select a Source Installation: 1

Proceed with Phase 2 Migration: y

Confirm Migration was successful:
If the Migration failed check the "migrationutility.log" for more details:
/opt/Symantec/DataLossPrevention/EnforceServer/<version>/logs/debug\migrationutility.log