DLP Detection Server Quick Install Guide for Linux

Products

• Data Loss Prevention
• Data Loss Prevention API Detection for Developer Apps Virtual Appliance
• Data Loss Prevention API Detection Virtual Appliance
• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention Cloud Detection Service for ICAP
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Package
• Data Loss Prevention Cloud Prevent for Microsoft Office 365
• Data Loss Prevention Cloud Service for Discovery/Connector
• Data Loss Prevention Cloud Service for Email
• Data Loss Prevention Cloud Storage
• Data Loss Prevention Core Package
• Data Loss Prevention Data Access Governance
• Data Loss Prevention Discover Suite
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Suite
• Data Loss Prevention Enforce
• Data Loss Prevention Enterprise Suite
• Data Loss Prevention for Mobile
• Data Loss Prevention for Office 365 Email and Gmail with Email Safeguard
• Data Loss Prevention Form Recognition
• Data Loss Prevention Network Discover
• Data Loss Prevention Network Email
• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Monitor and Prevent for Email
• Data Loss Prevention Network Monitor and Prevent for Email and Web
• Data Loss Prevention Network Monitor and Prevent for Web
• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Network Prevent for Email Virtual Appliance
• Data Loss Prevention Network Prevent for Web Virtual Appliance
• Data Loss Prevention Network Protect
• Data Loss Prevention Network Web
• Data Loss Prevention Oracle Standard Edition 2
• Data Loss Prevention Plus Suite
• Data Loss Prevention Sensitive Image Recognition
• Data Loss Protection Oracle Standard Edition

Issue/Introduction

This is a Quick Install guide for the Data Loss Prevention Detection Server

For the full "DLP Quick Install Guides" please visit the following link: DLP Quick Install Guides

Environment

Linux

Cause

The Detection Servers are core components required for Data Loss Prevention.

Resolution

VERSION DISCLAIMER: Please note that the following instructions are version agnostic, and can generally be used on any currently supported version. As such, you will find several variables denoted such as "<DLPversion>" to indicate where a version number "should" be used. You will need to replace these variables with the appropriate version that you are attempting to use. Below are a few examples of such translations... <DLPversion>  = 15.8, 16.0, 16.0.1 or 16.0.2 <DLPfullversion>  = 16.0.10000.60631 <ORACLEversion>  = 193000 or 19.3.0.0 <JREversion> = jdk8u322-b06 or 8u322b06

 

Download Installers: https://support.broadcom.com/group/ecx/productdownloads?subfamily=Data%20Loss%20Prevention
DLP Platform Installer: Symantec_DLP_<DLPversion>_Platform_Lin-IN_<DLPfullversion>.zip

RHEL Developer Subscription:
     RHEL Registration Quick Install Guide for Linux

Firewalld: 

     DLP on RHEL: How to open firewalld ports

DLPInstallers directory:
     - At the root level create a new directory called "DLPInstallers", this will be used to download all of the DLP related software.
          mkdir /DLPInstallers
     
     - Download all of the DLP/Oracle installers and place them into this "DLPInstallers" directory.

Download additional software:
     yum install zip unzip
     - This will install "zip", and "unzip"
     - You may see a message indicating that one or more of these is already installed. That is perfectly fine, you can install any missing utilities and move on.

Install Java:
     Java AdoptOpenJRE Quick Install Guide for Linux

Create the Environment Variables:
     Environment Variables Quick Install Guide for Linux

 

 

Install the DLP Detection Server:
- Copy the "DetectionServer.zip" to the DLPInstallers dir
     unzip DetectionServer.zip
     

- Grant permissions to the files 755
     chmod 755 *.rpm
     

- Install/Confirm the Dependencies
          - Create a new "downloads" directory
               mkdir downloads
          - Run the following YUM command to download the dependencies
               yum install --downloadonly --downloaddir=./downloads *.rpm
          - CD into the downloads directory
               cd downloads
          - Run the following YUM command to install the dependencies
               yum install *.rpm

- Install using the "install.sh" script
     ./install.sh -t detection 
     

- Run the DetectionServerConfigurationUtility

-Navigate to: /opt/Symantec/DataLossPrevention/DetectionServer/<DLPversion> /Protect/install

-Run:
./DetectionServerConfigurationUtility -silent -jreDirectory=/opt/AdoptOpenJRE/<JREversion> -serviceUserOption=NewUser -serviceUserUsername=SymantecDLP -bindHost=0.0.0.0 -bindPort=8100 -fipsOption=Disabled

Add your Detection Server to the Enforce Console:
     - Open the Enforce Web Interface
          https://<enforce>/ProtectManager/Logon
          System > Servers and Detectors > Overview
     - Click on "Add Server"
          Select "Software Server"
     - Select your Detection Server Type:
       
     - Specify the Detection Server Details
       
     Name: The display name of the detection server in the Enforce Console
     Host: Servername or IP Address of the Detection Server
     Port: Port for the detection Server to listen to for Enforce (default is 8100)

     - Save the Server

The Detection Server should report in within a few seconds. If it does not, simply restart the Detection Server Service(Detection Server), and the SymantecDLP Detection Server Controller Service (Enforce).