Detection Server Quick Upgrade Guide for Linux

Products

• Data Loss Prevention
• Data Loss Prevention API Detection for Developer Apps Virtual Appliance
• Data Loss Prevention API Detection Virtual Appliance
• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention Cloud Detection Service for ICAP
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Package
• Data Loss Prevention Cloud Prevent for Microsoft Office 365
• Data Loss Prevention Cloud Service for Discovery/Connector
• Data Loss Prevention Cloud Service for Email
• Data Loss Prevention Cloud Storage
• Data Loss Prevention Core Package
• Data Loss Prevention Data Access Governance
• Data Loss Prevention Discover Suite
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Suite
• Data Loss Prevention Enforce
• Data Loss Prevention Enterprise Suite
• Data Loss Prevention for Mobile
• Data Loss Prevention for Office 365 Email and Gmail with Email Safeguard
• Data Loss Prevention Form Recognition
• Data Loss Prevention Network Discover
• Data Loss Prevention Network Email
• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Monitor and Prevent for Email
• Data Loss Prevention Network Monitor and Prevent for Email and Web
• Data Loss Prevention Network Monitor and Prevent for Web
• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Network Prevent for Email Virtual Appliance
• Data Loss Prevention Network Prevent for Web Virtual Appliance
• Data Loss Prevention Network Protect
• Data Loss Prevention Network Web
• Data Loss Prevention Oracle Standard Edition 2
• Data Loss Prevention Plus Suite
• Data Loss Prevention Sensitive Image Recognition

Issue/Introduction

This is a Quick Upgrade Guide for the Data Loss Prevention Detection Server

For the full "DLP Quick Upgrade Guide" please visit the following link: DLP Quick Upgrade Guide

Environment

Linux

Cause

The Detection Server is a core component required for Data Loss Prevention.

Resolution

VERSION DISCLAIMER: Please note that the following instructions are version agnostic, and can generally be used on any currently supported version. As such, you will find several variables denoted such as "<DLPversion>" to indicate where a version number "should" be used. You will need to replace these variables with the appropriate version that you are attempting to use. Below are a few examples of such translations... <DLPversion>  = 15.8, 16.0, 16.0.1 or 16.0.2 <DLPfullversion>  = 16.0.10000.60631 <ORACLEversion>  = 193000 or 19.3.0.0 <JREversion> = jdk8u322-b06 or 8u322b06

 

Download Installers: https://support.broadcom.com/group/ecx/downloads
DLP Platform Installer: Symantec_DLP_<DLPversion>_Platform_Lin-IN_<DLPfullversion>.zip

Install Java:
     Java AdoptOpenJRE Quick Install Guide for Linux

Update the Environment Variables:
     Environment Variables Quick Install Guide for Linux

Install the new Detection Server software

1. Unzip the DetectionServer.zip 

             unzip DetectionServer.zip

2. chmod the RPM files to 755

                 chmod 755 *.rpm

3. Import the RPM Key

cd /DLPInstallers/DLP/Symantec_DLP_RPM_Signing_key.asc

rpm --import Symantec_DLP_RPM_Signing_Key.asc

Download the needed Dependencies

4. Make a downloads dir for the dependencies

        mkdir downloads

5. Download the needed rpms to the downloads dir:

         yum install --downloadonly --downloaddir=./downloads *.rpm

                  This will download all of the dependency installers that are found in the local .RPM files into a downloads directory

6. From the "downloads"  you can run the local install command

          cd /downloads

          yum localinstall *.rpm

7. This will install all of the dependency RPM's that were downloaded.

Install the Detection Server on Linux

          cd /DLPInstallers/DLP/<DLPversion>/New_Installs/Release

          ./install.sh -t detection

Run the Migration Utility

         cd /opt/Symantec/DataLossPrevention/DetectionServer/<DLPversion>/Protect/Migrator

         ./migrateDetection.sh

Choose "y" to proceed with phase 2

Login to the Enforce Console to confirm the Detection Server upgrade has completed: 

https://<server ipaddress>/ProtectManager/SystemOverview.do