DLP Upgrade Preparing for the upgrade Pre upgrade

DLP Upgrade Ø Ø Preparing for the upgrade Pre upgrade tasks Upgrading to new release Post upgrade tasks

Preparing for the Upgrade Ø Download documents for the release version you plan for. § Release Notes § Symantec Upgrade Guide Ø Open case with Symantec to have Symantec upgrade expert go over your environment to check any things need to be upgraded. Ø Arrange for Symantec support during the upgrade in case you need help during upgrade. Ø Post your questions on the DLP forum for the specific release upgrade. Ø Plan to schedule upgrades for a time that minimizes service interruption. Ø If available, upgrade QA environment first.

Pre Upgrade Tasks Ø Download the software from Symantec site for the release version you plan for. Ø Upgrade your database if current version of database is not compatible. Have DBA add permissions to the Enforce Server database account (ver. 11 requires additional database permissions). Ø Back up your database before any upgrade. You cannot recover from an unsuccessful upgrade without a backup of your Oracle database. Ø Update any 3 rd party software like Winpcap, Endace card driver etc, that needs to be updated to work with the release version you plan for. Ø Copy any custom configuration files/settings, just to be on safe side (server. xml). Ø Take screen shots of main DLP windows for verification of data to be carried over from current version to new version after the upgrade.

Upgrading to New Release Ø Make sure that all Network Discover scans are halted before starting the upgrade. Ø Verify that all the detection servers to be upgraded are connected. Ø Upgrade DLP through the Upgrade Wizard, which you access from the Enforce Server. Ø Locally (in other words, manually) on individual detection servers. § § § If a detection server was disconnected from the network. If the DLP services of a detection server were shut down at the time you upgraded the Enforce Server. If the detection server is running on a different operating system from the Enforce Server. Ø During upgrade if you encounter any issues you can check online Symantec DLP Knowledgebase for the solution.

Post Upgrade Tasks Ø Verify that Symantec Data Loss Prevention operates correctly by performing some checks. § § § § Recycle the detection servers to verify that they are connected. Click on each heading in the Enforce Server navigation pane to view the data that is carried over from a previous version. Check for the reports that are saved from a previous version. Send test emails to trigger couple of existing policies. Run scans on selective Discover targets. Pay special attention to custom settings and attributes. Check the Events screen for any severe events. Ø Revert to the previous Symantec Data loss Prevention release. If the need arises.