Version Update 3.0-14

Infolock is pleased to announce the immediate release of version 3.0-14 of the INSIGHT DLP Appliance Configuration Tool (IDACT). 

IDACT 3.0-14 provides:

• New feature enhancements and bug fixes
• Added support for Symantec DLP v16.0.02 (16 MP2)
• Updated support for Symantec DLP v16.0.01 (16 MP1)
  
• Stability improvements
• An update for the IDACT OS on the INSIGHT Appliance, Enforce, and all running Detection servers

=======================================================================

Important Notes

1. The INSIGHT Web UI services must be enabled and running before this IDACT update can begin.
   • SSH to Appliance host as protect user and run:
     • sudo service appliance-web status
     • Should show: Appliance web server is running
2. Verify that all servers (Appliances and SDLP VMs) have internet access to repool7.insightdlp.com over ports 80 (default) or 443. If you plan to use port 443 for IDACT updates, please review Update Repo from port 80(HTTP) to 443(HTTPS). 
   • SSH to Appliance host as protect user and run:
   • cat /etc/yum.repos.d/IDACT3-Base.repo
   • Should show: baseurl=https://repoOL7.insightdlp.com/...
3. If using a proxy, please verify the files below are configured correctly on each host and VM:
   • /etc/yum.conf
   • /etc/wgetrc
   • Please follow "proxy" command details found in article: https://support.insightdlp.com/hc/en-us/articles/360000304173
4. We recommend that you verify and complete a backup (offload off the Appliance, Enforce, or Detection servers) of all modified or customized scripts prior to completing the IDACT update.
5. We recommend that you review all modified and/or customized scripts to verify that your previous changes are still applied after the IDACT update – if not, you will need to reapply the changes.
6. After every IDACT update, we recommend that the Appliance and SDLP VMs are restarted/rebooted.
7. Please note that if you were already on 16.0 MP1 before applying this IDACT update, then the hotfix 16.0.00101.60099 will be automatically applied 10 minutes after the IDACT update completes. SDLP services will restart.

Note: As of Feb 15th, 2023, you will only be able to reach our INSIGHT repositories via port 443(HTTPS).

=======================================================================

Release Scope

This release will only update the underlying OS and IDACT software - it will not upgrade your DLP release. If you require a DLP release upgrade on your INSIGHT Appliance, please follow the latest Upgrade Guide version within the support portal at  INSIGHT 16.0.02 (16.0 MP2) Upgrade Guide.

Before Upgrading Symantec DLP or IDACT Firmware

The INSIGHT Support Team strongly recommends you complete the following before upgrading your Symantec DLP or IDACT Firmware:

• Check the INSIGHT DLP Appliance Support Matrix before attempting to upgrade the Symantec DLP software and/or the INSIGHT DLP Appliance IDACT firmware. This will determine if your Appliance model will support the desired upgrade version.
• Make note and/or take screenshots of important settings as IDACT updates may revert or change some custom settings, such as backup time and/or customized backup scripts.

Note: Failure to abide by the Appliance Support Matrix may put your INSIGHT DLP Appliance into an unsupported configuration, resulting in incompatibility-related issues or failures.

=======================================================================

To Update the IDACT Version

Follow the steps outlined below to update your IDACT via SSH or the Appliance WebUI.

Via SSH:

You will be able to see the output of running updates and related errors when using SSH to conduct updates.

To conduct this update via SSH, you will follow these steps:

1. Log into each Infolock INSIGHT DLP Appliance via SSH as Appuser
2. Issue the following command: Update
3. Issue the following command again: Update

Note: For this current version please run the update twice.

Via Appliance WebUI:

You will not be able to see the output(s) of running the update when using Appliance WebUI to conduct updates.

To conduct this update via Appliance WebUI, you will follow these steps:

1. Log into each Infolock INSIGHT DLP Appliance WebUI as Appuser
2. Navigate to the "Device List" page
3. Select: Update OS
   *Please allow up to 30 minutes for this first update to complete before executing it again
4. Select: Update OS

Note: For this current version please run Update OS twice.

If there are any errors or warnings, please re-run the update.

The INSIGHT Support Team strongly recommends you do the following if any issues arise while upgrading your Symantec DLP or IDACT Firmware when running WebUI:

• Run sudo /opt/appliance/KernelFix.sh to fix any kernel issues on all Appliances and VMs (Enforce and Detection servers). Run this twice.
• Reboot the Appliance host if the Appliance WebUI does not start after the update.

=======================================================================

After Updating

The following are recommendations on how to maintain the health/efficacy of your Symantec DLP and/or IDACT Appliance after updating.

1. Run the fixes outlined below for any kernel issues on all Appliances and VMs (Enforce and Detection servers).
   

   • As a protect user on the appliance, run sudo/opt/appliance/KernelFix.sh 

     OR

   • As an appuser on the VMs (Enforce and Detection servers), run sudo/opt/appliance/KernelFix.sh 
2. Always restart/reboot your Appliance after every IDACT update. Reboot the Appliance host and all running SDLP servers via Appliance WebUI or SSH.
   • As an appuser, navigate to the Device List via Appliance WebUI and select restart

     OR

   •  As an appuser via SSH to the Appliance, restart the Appliance

   • As an appuser via SSH to Enforce and Detection server VMs, run sudo shutdown -r now

3. If the Appliance WebUI does not start after the update, reboot the Appliance host or log into it via SSH and take one of the following actions.

   • As an appuser, run server_restart

     OR

   • As a protect user, run sudo service appliance-web restart

1. ====================================================================

Obtaining Support

If you require technical assistance with any issues, have questions, or require further information, please contact the Infolock's INSIGHT Support Team at either support@infolock.com or via  https://support.insightdlp.com

 

Regards,
Infolock Support Team
support@infolock.com

=======================================================================

 

IDACT 3.0-14 Change Log

The table below outlines changes made in IDACT 3.0-14

Appliance
Update Type	Update Description	Reference Link
Minor Update	Minor Updates
Enforce
Update Type	Update Description	Reference Link
Minor Update	Minor Updates
Minor Update	Added support for SDLP 16.0 MP2	https://support.insightdlp.com/hc/en-us/articles/17943113798803
Minor Update	Added support for SDLP 16.0 MP1 hotfix 16.0.00101.60099	https://support.insightdlp.com/hc/en-us/articles/16571960369299
Minor Update	Added support for Oracle 19c Jan and Apr 2023 PSU	https://support.insightdlp.com/hc/en-us/articles/360021855113
Detection
Update Type	Update Description	Reference Link
Minor Update	Minor Updates
Minor Update	Added support for SDLP 16.0 MP2	https://support.insightdlp.com/hc/en-us/articles/17943113798803
Minor Update	Added support for SDLP 16.0 MP1 hotfix 16.0.00101.60099	https://support.insightdlp.com/hc/en-us/articles/16571960369299