DLP Enforce Server Quick Upgrade Guide for Linux

Products

• Data Loss Prevention API Detection for Developer Apps Virtual Appliance
• Data Loss Prevention API Detection Virtual Appliance
• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention Cloud Detection Service for ICAP
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Package
• Data Loss Prevention Cloud Prevent for Microsoft Office 365
• Data Loss Prevention Cloud Service for Discovery/Connector
• Data Loss Prevention Cloud Service for Email
• Data Loss Prevention Cloud Storage
• Data Loss Prevention Core Package
• Data Loss Prevention Data Access Governance
• Data Loss Prevention Discover Suite
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Suite
• Data Loss Prevention Enforce
• Data Loss Prevention Enterprise Suite
• Data Loss Prevention for Mobile
• Data Loss Prevention for Office 365 Email and Gmail with Email Safeguard
• Data Loss Prevention Form Recognition
• Data Loss Prevention Network Discover
• Data Loss Prevention Network Email
• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Monitor and Prevent for Email
• Data Loss Prevention Network Monitor and Prevent for Email and Web
• Data Loss Prevention Network Monitor and Prevent for Web
• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Network Prevent for Email Virtual Appliance
• Data Loss Prevention Network Prevent for Web Virtual Appliance
• Data Loss Prevention Network Protect
• Data Loss Prevention Network Web
• Data Loss Prevention Oracle Standard Edition 2
• Data Loss Prevention Plus Suite
• Data Loss Prevention Sensitive Image Recognition

Issue/Introduction

This is a Quick Upgrade Guide for the Data Loss Prevention Enforce Server

For the full "DLP Quick Upgrade Guide" please visit the following link: DLP Quick Upgrade Guide

Environment

Linux

Cause

The Enforce Server is a core component required for Data Loss Prevention.

Resolution

Download Installers: https://support.broadcom.com/group/ecx/downloads "Please note, you must log in to the portal and navigate to Data Loss Prevention"
DLP Platform Installer: Symantec_DLP_<version>_Platform_Lin-IN_<full version>.zip
Oracle Client Installer: LINUX.X64_193000_client.zip
     ** The Oracle Client MUST be installed if Oracle is not installed locally on the Enforce Server.
     ** The Oracle Client version MUST match the Database version.
     ** If upgrading the Oracle client you must uninstall the current version, then reinstall the updated version.

DLPInstallers directory:
     1. At the root level create a new directory called "DLPInstallers", this will be used to download all of the DLP related software.
          mkdir DLPInstallers
     
     2. Download all of the DLP/Oracle installers and place them into this "DLPInstallers" directory.

Install New Version of Java:
     Java AdoptOpenJRE Quick Install Guide for Linux

Update the Oracle 19c Client:
     Oracle 19c Client Quick install Guide for Linux

Update the Environment Variables:
     Environment Variables Quick Install Guide for Linux

Stop any running Oracle Jobs:
     - Run the following SQL statement on your Oracle Database:

     select count(*) from user_jobs;

If the job's are not 0 refer to the following:
Stopping Oracle Database Jobs

Run the UpgradeReadinessTool:
     Quick URT Guide

 

Install the new version of the Enforce Server:
     ** Note: This is a parallel installation and will exist at the same time as the previous version of DLP.
     Enforce Quick Install Guide for Linux: Enforce Quick Install Guide for Linux

 

Run the Migration Phase:
1. Navigate to: opt/Symantec/DataLossPrevention/EnforceServer/16.0.00000/Protect/Migrator
     cd /opt/Symantec/DataLossPrevention/EnforceServer/16.0.00000/Protect/Migrator
     ** Be sure to extract the URT to the following dir: "/opt/Symantec/DataLossPrevention/EnforceServer/16.0.00000/Protect/Migrator/URT" or the Migration will fail

2. Run the MIgration "migrateEnforce.sh"
     ./migrateEnforce.sh

Confirm the JRE Path: y
Proceed with Phase 1 Migration: y
Select a Source Installation: 1

Proceed with Phase 2 Migration: y

Confirm Migration was successful:
If the Migration failed check the "migrationutility.log" for more details:
     /opt/Symantec/DataLossPrevention/EnforceServer/<version>/logs/debug\migrationutility.log

Once successfully completed, login to the Enforce Console to confirm upgrade

You will have an initial page for the EULA

All 3 fields are required to be able to select "I Accept" , Once populated select I Accept and your home page will load

Navigate to "System -> Server and Detectors -> Overview" 

You will see your DLP Enforce Server is now upgraded to DLP 16.0