Upgrading to the latest version of Symantec ICSP Neural
search cancel

Upgrading to the latest version of Symantec ICSP Neural

book

Article ID: 173803

calendar_today

Updated On:

Products

Industrial Control System Protection Neural

Issue/Introduction

The latest available version of ICSP Neural is 6.1.5.176. You can now directly upgrade from an earlier ICSP 6.x version to the latest available version.

Note: The upgrade operation restarts the scanner station for the updates to take effect. As such, there is downtime involved. Symantec recommends you incorporate some planned downtime in your ICSP maintenance process.

Depending on whether your scanner station is connected to the network or not, you can perform the upgrade as follows:

  • Online-mode upgrade: If your scanner station is connected to the network directly or through a proxy server, you can perform the online upgrade.
  • Offline-mode upgrade: If your scanner station is not connected to the network, you can perform the offline upgrade.

Whether you do an online-mode upgrade or offline-mode upgrade, your existing configurations and data are retained.

Resolution

Important Note: Export the key from the scanner before the upgrade so that no agents will need to be reinstalled.

To export the ICSP keys file

    • Click Scan > Import / Export Key File
    • On the Export Key File section, click Download Key File.

Ensure that the downloaded ICSP keys file is kept at a secure location. After the upgrade, import the iCSP keys back into the unit

To import the ICSP keys file
Importing the ICSP keys of another scanner station overwrites the existing keys. Create a backup (export) of the existing keys and store those at a secure location before importing the new keys.

    • Click Scan > Import / Export Key File.
    • On the Import Key File section, click the Choose Files icon.
    • Navigate to the location of the exported key and select the key file.
    • Click Import.

 

 

Upgrading a scanner station which is connected to the network (online-mode upgrade)

You can upgrade your scanner station to the latest version of ICSP by one of the following procedures:

  • (Recommended) Full image update through the command line
  • Patch update from the ICSP Web Interface

 

Performing a full image update through the command line

  1. Connect a keyboard to one of the USB ports located on the back of the scanner station.
  2. Press:
    Ctrl + Alt + F2
  3. Type the password of the default ICSP admin account.
  4. Type the following command:
    enable
  5. Press Enter.
  6. Type the password of the default ICSP admin account.
  7. Type the following command:
    installed-systems load http://cdnup.bluecoat.com/latest/icsp_6_1_5-276137.bcsi
  8. When the full image is 100% complete, type the following command to restart the scanner station:
    restart
  9. Confirm restarting the system when prompted.

Performing a patch update from the ICSP Web Interface

When a newer version of ICSP Neural is available, the Patch Updates Available screen is displayed when you log on to the ICSP Web Interface. In the following screenshot, <N.n.n> refers to the latest available version of ICSP. Click the drop-down list next to the latest ICSP version to view the patch content. 

Upgrading a scanner station which is not connected to the network (offline-mode upgrade)

To upgrade your scanner station in the offline mode, perform the following steps:

Step 1: Enable the setting for manual software updates through a USB device

  1. Log on to the ICSP Web Interface
  2. Navigate to the SOFTWARE UPDATES settings
  3. Move the slider corresponding to Enable USB Updates to the enabled position.
  4. Click Save Configuration.

Step 2: Manually install the upgrade file

  1. Download the OfflineUpdater.zip file from this location: https://broadcom.box.com/v/symantecicsp615 
  2. Extract the OfflineUpdater folder
  3. Rename the extracted folder to remove any numbers, it should be called OfflineUpdater, otherwise, the installation of ICSP update will fail
  4. Save the extracted folder to a clean USB device which does not contain any whitelisted file, password-protected file, or files which have not been scanned by ICSP
  5. Connect the USB device, on which you have saved the extracted OfflineUpdater folder, to the scanner station
  6. The scanner station automatically detects that the patch file is available 
  7. To upgrade to the latest version, select YES (It might take a few moments to install the patch)
  8. When the system update completes, you are prompted to restart the scanner station
  9. Restart the scanner station to apply the patch

When the scanner station reboots, the UI notifies you whether the installation of the patch has been successful or not

What shall I do if the offline patch installation fails?

If the offline patch installation fails, the UI will notify you 

Reattempt the offline patch installation by ensuring the following:
  • That you have downloaded the OfflineUpdater.zip file in a clean USB device which does not contain any whitelisted file, password-protected file, or files which have not been scanned by ICSP
  • That you have renamed the extracted folder before saving it to the USB device, it should be named OfflineUpdater

 

What shall I do if the scanner station does not detect the patch installation files in the USB device?

  1. If you have not enabled the setting for manual software updates through a USB device, the scanner station does not detect the patch installation files
  2. You must enable this setting and reattempt offline patch installation. For more details, see  Step 1: Enable the setting for manual software updates through a USB device section in this article
Powered by Wolken Software