Version Update 3.0-16
Infolock is pleased to announce the immediate release of version 3.0-16 of the INSIGHT DLP Appliance Configuration Tool (IDACT).
IDACT 3.0-16 provides:
- New feature enhancements and bug fixes
- Updated support for Symantec DLP v16.0.1 RU1 (16 RU1)
- Stability improvements
- An update for the IDACT OS on the INSIGHT Appliance, Enforce, and all running Detection servers
=======================================================================
Important Notes
-
The INSIGHT Web UI services must be enabled and running before this IDACT update can begin.
-
SSH to Appliance host as protect user and run:
- sudo service appliance-web status
- Should show: Appliance web server is running
-
SSH to Appliance host as protect user and run:
-
Verify that all servers (Appliances and SDLP VMs) have internet access to repool7.insightdlp.com over ports 80 (default) or 443. If you plan to use port 443 for IDACT updates, please review Update Repo from port 80(HTTP) to 443(HTTPS).
- SSH to Appliance host as protect user and run:
- cat /etc/yum.repos.d/IDACT3-Base.repo
- Should show: baseurl=https://repoOL7.insightdlp.com/...
-
If using a proxy, please verify the files below are configured correctly on each host and VM:
- /etc/yum.conf
- /etc/wgetrc
- Please follow "proxy" command details found in article: https://support.insightdlp.com/hc/en-us/articles/360000304173
- We recommend that you verify and complete a backup (offload off the Appliance, Enforce, or Detection servers) of all modified or customized scripts prior to completing the IDACT update.
- We recommend that you review all modified and/or customized scripts to verify that your previous changes are still applied after the IDACT update – if not, you will need to reapply the changes.
- After every IDACT update, we recommend that the Appliance and SDLP VMs are restarted/rebooted.
- Please note that if you were already on 16.0 MP2 before applying this IDACT update, then the hotfix 16.0.00201.60196 will be automatically applied 10 minutes after the IDACT update completes. SDLP services will restart.
Note: As of Feb 15th, 2023, you will only be able to reach our INSIGHT repositories via port 443(HTTPS).
=======================================================================
Release Scope
This release will only update the underlying OS and IDACT software - it will not upgrade your DLP release. If you require a DLP release upgrade on your INSIGHT Appliance, please follow the latest Upgrade Guide version within the support portal at INSIGHT 16.0.02 (16.0 MP2) Upgrade Guide.
Before Upgrading Symantec DLP or IDACT Firmware
The INSIGHT Support Team strongly recommends you complete the following before upgrading your Symantec DLP or IDACT Firmware:
- Check the INSIGHT DLP Appliance Support Matrix before attempting to upgrade the Symantec DLP software and/or the INSIGHT DLP Appliance IDACT firmware. This will determine if your Appliance model will support the desired upgrade version.
- Make note and/or take screenshots of important settings as IDACT updates may revert or change some custom settings, such as backup time and/or customized backup scripts.
Note: Failure to abide by the Appliance Support Matrix may put your INSIGHT DLP Appliance into an unsupported configuration, resulting in incompatibility-related issues or failures.
=======================================================================
To Update the IDACT Version
Follow the steps outlined below to update your IDACT via SSH or the Appliance WebUI.
Via SSH:
You will be able to see the output of running updates and related errors when using SSH to conduct updates.
To conduct this update via SSH, you will follow these steps:
- Log into each Infolock INSIGHT DLP Appliance via SSH as Appuser
- Issue the following command: Update
- Issue the following command again: Update
Note: For this current version please run the update twice.
Via Appliance WebUI:
You will not be able to see the output(s) of running the update when using Appliance WebUI to conduct updates.
To conduct this update via Appliance WebUI, you will follow these steps:
- Log into each Infolock INSIGHT DLP Appliance WebUI as Appuser
- Navigate to the "Device List" page
- Select: Update OS
*Please allow up to 30 minutes for this first update to complete before executing it again - Select: Update OS
Note: For this current version please run Update OS twice.
If there are any errors or warnings, please re-run the update.
The INSIGHT Support Team strongly recommends you do the following if any issues arise while upgrading your Symantec DLP or IDACT Firmware when running WebUI:
- Run sudo /opt/appliance/KernelFix.sh to fix any kernel issues on all Appliances and VMs (Enforce and Detection servers). Run this twice.
- Reboot the Appliance host if the Appliance WebUI does not start after the update.
=======================================================================
After Updating
The following are recommendations on how to maintain the health/efficacy of your Symantec DLP and/or IDACT Appliance after updating.
-
Run the fixes outlined below for any kernel issues on all Appliances and VMs (Enforce and Detection servers).
-
As a protect user on the appliance, run sudo/opt/appliance/KernelFix.sh
OR
- As an appuser on the VMs (Enforce and Detection servers), run sudo/opt/appliance/KernelFix.sh
-
-
Always restart/reboot your Appliance after every IDACT update. Reboot the Appliance host and all running SDLP servers via Appliance WebUI or SSH.
-
As an appuser, navigate to the Device List via Appliance WebUI and select restart
OR
-
As an appuser via SSH to the Appliance, restart the Appliance
-
As an appuser via SSH to Enforce and Detection server VMs, run sudo shutdown -r now
-
As an appuser, navigate to the Device List via Appliance WebUI and select restart
-
If the Appliance WebUI does not start after the update, reboot the Appliance host or log into it via SSH and take one of the following actions.
-
As an appuser, run server_restart
OR
- As a protect user, run sudo service appliance-web restart
-
- ====================================================================
Obtaining Support
If you require technical assistance with any issues, have questions, or require further information, please contact the Infolock's INSIGHT Support Team at either support@infolock.com or via https://support.insightdlp.com
Regards,
Infolock Support Team
support@infolock.com
=======================================================================
IDACT 3.0-16 Change Log
The table below outlines changes made in IDACT 3.0-16
Appliance | ||
Update Type |
Update Description |
Reference Link |
Minor Update |
Minor Updates |
|
Minor Update |
SSL Cert update via Appliance WebUI |
https://support.insightdlp.com/hc/en-us/articles/19686643242771 |
Minor Update |
Appliance WebUI General Information |
https://support.insightdlp.com/hc/en-us/articles/19688376704787 |
Minor Update |
SDLP Upgrade via Appliance webUI |
https://support.insightdlp.com/hc/en-us/articles/18898677661843 |
Minor Update |
Oracle patch via webUI |
https://support.insightdlp.com/hc/en-us/articles/19686647157907 |
Enforce | ||
Update Type | Update Description | Reference Link |
Minor Update | Minor Updates | |
Minor Update |
Updated support for SDLP 16.0 RU1 |
https://support.insightdlp.com/hc/en-us/articles/21534774307091 |
Minor Update | Added pre SDLP upgrade precheck tool: IDACTSDLPUpgradePreCheck.sh |
https://insightdlp.zendesk.com/hc/en-us/articles/24309879928211 |
Minor Update |
Support for Oracle July 2023 PSU |
https://support.insightdlp.com/hc/en-us/articles/360021855113 |
Detection | ||
Update Type | Update Description | Reference Link |
Minor Update | Minor Updates | |
Minor Update | Updated support for SDLP 16.0 RU1 |
https://support.insightdlp.com/hc/en-us/articles/21534774307091 |
0 Comments