DLP 升級 | 賽門鐵克

Hotfix 下載…..【無法直接在 DLP 12.5.1 的版本上，直接安裝 12.5 的 Langusge Pack】

You can download following files from URL

https://fileshare.symantec.com/index.html

Hotfix_12.5.1301.01001.zip

README_Hotfix_12.5.1301.txt

Your login credential are

User ID: Allen_Chung

Password: Welc0meAC!

Instruction about how to apply this Hotfix is given in Readme_Hotfix_12.5.1301. txt file. This Hotfix is required to apply on Enforce server.

If in case you have any query or concern about steps to apply Hotfix please let me know.

無法直接在 DLP 12.5.1 的版本上，直接安裝 12.5 的 Langusge Pack，會出現以下的錯誤

必須要先向 Symantec Support 取得【Hotfix_12.5.1301.01001.zip】，解壓後取得【internationalization.jar】【LanguagePackUtility.exe】，然後參考【README_Hotfix_12_5_1301.txt】進行以下步驟

Constraints:

————-

The hotfix can be applied to DLP v12.5.1

To Install:

———–

On a Windows system:

——————–

On the Manager:

—————

1. Unzip the hotfix binaries

2. Shutdown all Vontu services in following order.

1. Vontu Monitor Controller (if applicable)

2. Vontu Incident Persister

3. Vontu Manager

4. Vontu Notifier

5. Vontu Update (if necessary)

3. Backup existing LanguagePackUtility.exe located in the directory %SYMANTEC_HOME%\Protect\bin

4. Backup existing internationalization.jar located in the directory %SYMANTEC_HOME%\Protect\lib\jar

5. Copy LanguagePackUtility.exe from the unzipped Hotfix folder to %SYMANTEC_HOME%\Protect\bin (overwrite existing file)

6. Copy internationalization.jar to %SYMANTEC_HOME%\Protect\lib\jar (overwrite existing file)

7. Start all Vontu services.

1. Vontu Notifier

2. Vontu Manager

3. Vontu Incident Persister

4. Vontu Monitor Controller (if applicable)

5. Vontu Update (if necessary)

On a Linux System:

——————

On the Manager:

—————

1. Unzip the Hotfix binaries

2. Shutdown all the Vontu Services.

3. Backup existing LanguagePackUtility located in the directory %SYMANTEC_HOME%\Protect\bin

4. Backup existing internationalization.jar located in the directory %SYMANTEC_HOME%\Protect\lib\jar

5. Copy LanguagePackUtility from the unzipped Hotfix folder to %SYMANTEC_HOME%\Protect\bin (overwrite existing file)

6. Copy internationalization.jar to %SYMANTEC_HOME%\Protect\lib\jar (overwrite existing file)

7. Start all Vontu services.

DLP 11.0 upgrade to 11.6

11.5 function

l Tablet Prevent Detection Server

→ Support iOS 4、iOS 5

→ HTTP、HTTPS、FTP、Exchange Active Sync

→ Integration with DLP Enforce

Plicy → VPN

管理→ MDM

l Oracle → 11.2.0.2

l Meta data detection → office (link、OLE 嵌入)、PDF (作者、主旨、建立日期、修改日期)

l Additional proxy support → Websense V-Series Appliance V10000、MS TMG

升級

l 9.0 → 10.0 → 11.0 → 11.5

Enforce Server (不必先升級資料庫，請備份資料庫、Detection Server)

→ Download Symantec_DLP_11.5_MP1_Upgrader_Win-In.zip

→於 Enforce Server確認 Enforce Server、Detection Server 運作是否正常

→ 於 Enforce Server 使用【升級精靈】升級 (升級精靈預設通訊號→8300)

l 在 Enforce Server 主機電腦上，使用文字編輯器開啟以下檔案：

\SymantecDLP\Protect\tomcat\webapps\ProtectManager\WEB-INF\struts-config.xml

C:\Vontu\Protect\tomcat\webapps\ProtectManager\WEB-INF\struts-config.xml

\SymantecDLP\Protect\tomcat\webapps\ProtectManager\WEB-INF\struts-config-admin.xml

\SymantecDLP\Protect\tomcat\webapps\ProtectManager\WEB-INF\struts-config-async.xml

l 在每個檔案中，找出以下這行：

l 在每個檔案中，將 maxFileSize 屬性的值變更為 1000m。例如：

l 儲存該檔案並結束文字編輯器。

l 在 Enforce Server 主機上重新啟動 Vontu Manager 服務。

→ 【升級精靈】可同時升級 Detection Server

( 重新啟動 Vontu Monitor Controller 服務，Detection Server 新版號才會顯示 )

→ 套用 Endpoint Prevent Server 代理程式組態，先將群組目錄建立索引與索引排程

→ 套用 Endpoint Prevent Server 代理程式組態

→ 升級 Endpoint Agent (11.0→11.1→11.5)

→ 升級掃描程式

→ 升級後的工作

→ 升級 WinPacp

→ 升級資料庫

→ 升級後需重上新版 Language Pack

l 注意事項

Ø Enforce Server 硬碟剩餘空間 → 50~100 G

Ø Detection Server 硬碟剩餘空間 → 300 MB

Ø 升級前請停止所有 Network Discover 掃描

Ø Enforce Server (11.5)

→ Endpoint Detection Server 11.0 (不可在此時將Endpoint Detection Server reboot)

→ 如果不小心 reboot 了，要先升級 Endpoint Agent，再升級 Endpoint Detection Server

升級實做

→【Download Symantec_DLP_11.5_MP1_Upgrader_Win-In.zip】

E:\DLP 升級\Symantec_DLP_11.5_MP1_Upgrader_Win-IN\DLP\Symantec_DLP_11_Win\11.5_Win\Upgrade_11.x_to_11.5

【11.5.0_Upgrader_Windows.jar】

→ 於 Enforce Server確認 Enforce Server、Detection Server 運作是否正常

→ 於 Enforce Server 使用【升級精靈】升級 (升級精靈預設通訊號→8300)

(升級精靈預設通訊埠 → 8300，https://Enforce_server:8300)

※ 若需更改通訊埠 → 修改 C:\Vontu\Protect\config\Manager.properties

Add

Update.wizard.port=port

There was an error uploading the file

Enforce UI 上載11.5.0_Upgrader_Windows.jar，改以手動上載

Below are the steps for Manually uploading the JAR file to the Enforce Server and upgrading to 11.1.2 from 11.0:

a) Copy the upgrade JAR file 11.5.0_Upgrader_Windows.jar to the \vontu\Protect\updates directory*.

b) Create a new directory that is named EnforceUpgrade11.5 inside the \vontu\Protect\updates directory.

c) Extract the contents of the upgrade JAR file 11.5.0_Upgrader_Windows.jar into the EnforceUpgrade11.5 directory* (you can use Winzip or WinRAR to extract the contents of the JAR file).

d) Run start_upgrade_wizard.bat, which is located in the \vontu\Protect\updates\EnforceUpgrade11.5 directory.

e) Wait a few minutes for the Upgrade Wizard server to start. This will open a command window with Tomcat as Title (make sure that you don’t close this window).

16:35~

f) Open a Web browser and go to: https://Enforce_server:8300

(Enforce_server is the name or IP address of the computer having Enforce server)

Continue using the standard upgrade procedures. See “Performing an upgrade with the Upgrade Wizard” in the upgrade guide.

[ERROR] com.vontu.updater.vontu8.FilePermissionChecker:

File “C:\Vontu\Protect\lib\native\wrapper.dll" is inaccessible.: java.io.FileNotFoundException: C:\Vontu\Protect\lib\native\ wrapper.dll (The process cannot access the file because it is being used by another process)