DCS 6.9.3 Solaris 11 Agent (SPARC and x86_64) New Agent Release 6.9.0.456
Article ID: 278659
Updated On:
Products
Issue/Introduction
This Solaris 11 agent will support seamless DCS agent upgrade with a single reboot (similar to all DCS supported platforms/agents).
DCS 6.9.3 Solaris 11 agent (SPARC and x86_64)
New Agent Release version 6.9.0.456
Environment
DCS 6.9.3 Solaris Agent
Version: 6.9.0.456
Resolution
Latest Agent Version
DCS 6.9.3 Solaris 11 Agent (SPARC and x86_64) New Agent Release 6.9.0.456
Agent Version: 6.9.0.456
Date of Update: Aug 21, 2024
Filename: Symantec_Data_Center_Security_Server_Advanced_6.9.0_Solaris_11.zip
Contents of the zip file:
agent-solaris11-sparc.bin
agent-solaris11-x86.bin
DCSSA_Agent_Guide.pdf
DCSSA_Planning_Deployment_Guide.pdf
DCSSA_Platform_Feature_Matrix.pdf
DCSSA_Release_Notes.pdf
MD5SUMS
SDCSSPreventionPolicyPack-v6.9.3-m5.2.9-2024012202.zip
Download Link: Broadcom Download Portal
Details:
New Version Support
Version Support
SRU18, SRU20, SRU35-SRU59, SRU61-SRU75
Supported SRU's are found on the following Pages
DCS 6.9.3 Supported SRU List
DCS 6.10.0 Supported SRU List
Prior Release's
DCS 6.9.3 Solaris 11 Agent (SPARC and x86_64) Agent Release 6.9.0.452 - Prior Release
Agent Version: 6.9.0.452
Date of Update: January 31st 2024
Filename: Symantec_Data_Center_Security_Server_Advanced_6.9.0_Solaris_11.zip
Contents of the zip file:
agent-solaris11-sparc.bin
agent-solaris11-x86.bin
DCSSA_Agent_Guide.pdf
DCSSA_Planning_Deployment_Guide.pdf
DCSSA_Platform_Feature_Matrix.pdf
DCSSA_Release_Notes.pdf
MD5SUMS
SDCSSPreventionPolicyPack-v6.9.3-m5.2.9-2024012202.zip
Details:
Third party component upgrades
Components: OpenSSL, cURL and zlib
DCS is not impacted by CVE-2023-38545 reported for cURL.
We updated the components as some vulnerability scans where picking up the version that the DCS Agent was using, raising alarms on some security dashboards. Due to dependency, OpenSSL and zlib were also required to be upgraded.
Installing
A Solaris 11 server might require additional 1.5 GB disk as per Network Publisher Configuration.
Disk space for the new Image Packaging System package installation of the Symantec Solaris agent is 100 MB. When the agent is installed on a server with additional package publishers configured to query network repositories, the Oracle package client reports an estimated disk space needed for the agent to be 1.5GB.
Installation time of the new Solaris agent includes a dryrun to check for system prerequisites. Dry run can be skipped if you create the following file to bypass the installation checks before the agent installation:
touch /etc/sdcss-check-bypass
Note: If there is a concern about issues with connecting to network repositories for other publishers on the server, you can disable the publishers temporarily before installing the Solaris 11 agent and then reenable them once the agent is installed. Temporarily disabling other network based publishers also improves the time taken to install the Solaris agent. This is an optional step.
Upgrading
Upgrade of Solaris 11 agent
The Symantec Solaris 11 Agent now supports seamless upgrade. Symantec uses the Oracle Image Packaging System (IPS) framework to install and upgrade the Solaris 11 agent. You must download and use the latest policy pack.
NOTE
If you want to use the same security group that is on the old Symantec Solaris 11 Agent, then make sure that the Detect duplicate agent setting is enabled on the Unified Management Console. If you do not have this setting enabled the server will move to the default group and the policies will be changed.
Symantec upgrades your Solaris 11 Agent seamlessly from version 6.9.0.x to 6.9.0.452 or later.
The Symantec Solaris Agent upgrade characteristics are as follows:
-
- The new installer based on Image Packaging System does the following:
- Removes the old Symantec Solaris 11 agent ( versions earlier than v6.9.0.426), and installs the new Symantec
Solaris 11 agent. - Preserves the settings for server communication.
- The new Symantec Solaris 11 Agent is registered as a new asset entry on the DCS Management Server under the
default security group if the Detect duplicate agent setting is disabled.
- Removes the old Symantec Solaris 11 agent ( versions earlier than v6.9.0.426), and installs the new Symantec
- If the old Symantec Solaris 11 Agent was in a non-default location, then the new Symantec Solaris installer supports
only the default install path, which is /opt/Symantec - You must reboot the computer to apply the policy on the agent.
- The new installer based on Image Packaging System does the following:
Troubleshooting
Solaris 11 Agent installation failure may leave temp files on the system.
The Broadcom publisher may be present on the computer even after the Symantec Solaris 11 Agent installation fails.
To resolve this issue, manually remove the left over files and the Broadcom publisher:
pkg unset-publisher Broadcom
cleanup files file in /var/tmp/SYMC*
Uninstall
New uninstallation script for Solaris 11 agent
A new uninstallation script is provided to uninstall the Symantec Solaris 11 Agent using the following command:
/usr/lib/symantec/scripts/uninstall.sh
Additional Information
For a list of all DCS 6.9.3 Updates and Hotfix's, please see the following KB document
DCS 6.9.3 Updates and Hotfix List - Data Center Security Server Advanced version and update details
Feedback
