Apply SDLP Hotfix 15.0.0102 Server(AgentEventFlood)

Symantec recently replaced a new hotfix for DLP 15.0.01 (MP1). It applies to Enforce and all Endpoint servers. This hotfix can be applied to all detection servers but really only applies to the Endpoint server. Please SSH to the Enforce and Endpoint server as protect user and execute the commands below.

***IMPORTANT NOTE***
Hotfix will be applied automatically during upgrade to IDACT 2.1-16. If on IDACT 2.1-15 or older and you are not planning to upgrade to IDACT 2.1-16 anytime soon, then please apply steps below.

Lately, also complete database update if below article applies: https://support.symantec.com/en_US/article.TECH249622.html

================

For Enforce:

Replace files located in (/opt/SymantecDLP/Protect/lib/jar/):
aggregator.jar
monitorcontroller.jar
replicationcommunication.jar


1. Stop the 'Vontu Monitor' and 'Vontu Monitor Controller' services on Enforce server.

/etc/init.d/VontuMonitor stop
/etc/init.d/VontuMonitorController stop


2. Backup current files (aggregator.jar, monitorcontroller.jar, replicationcommunication.jar)

mv /opt/SymantecDLP/Protect/lib/jar/aggregator.jar{,.bak}
mv /opt/SymantecDLP/Protect/lib/jar/monitorcontroller.jar{,.bak}
mv /opt/SymantecDLP/Protect/lib/jar/replicationcommunication.jar{,.bak}

 

3. Copy the hotfix file Hotfix_15.0.0102_Server.zip to the Enforce server as protect user to /home/protect/

 

4. Extract the hotfix file Hotfix_15.0.0102_Server.zip

cd /home/protect
unzip Hotfix_15.0.0102_Server.zip
cd /home/protect/server


5. Copy the aggregator.jar, monitorcontroller.jar and replicationcommunication.jar files from hotfix package to the directory /opt/SymantecDLP/Protect/lib/jar/.

cp aggregator.jar /opt/SymantecDLP/Protect/lib/jar/
cp monitorcontroller.jar /opt/SymantecDLP/Protect/lib/jar/
cp replicationcommunication.jar /opt/SymantecDLP/Protect/lib/jar/


6. Start the 'Vontu Monitor' and 'Vontu Monitor Controller' services.

/etc/init.d/VontuMonitor start
/etc/init.d/VontuMonitorController start

 

================

For Endpoint Servers:

Replace files located in (/opt/SymantecDLP/Protect/lib/jar/):
aggregator.jar
replicationcommunication.jar


1. Stop the 'Vontu Monitor' and 'Vontu Monitor Controller' services on Enforce server.

/etc/init.d/VontuMonitor stop


2. Backup current files (aggregator.jar, replicationcommunication.jar)

mv /opt/SymantecDLP/Protect/lib/jar/aggregator.jar{,.bak}
mv /opt/SymantecDLP/Protect/lib/jar/replicationcommunication.jar{,.bak}

 

3. Copy the hotfix file Hotfix_15.0.0102_Server.zip to the Endpoint server as protect user to /home/protect/

 

4. Extract the hotfix file Hotfix_15.0.0102_Server.zip

cd /home/protect
unzip Hotfix_15.0.0102_Server.zip
cd /home/protect/Server


5. Copy the aggregator.jar, monitorcontroller.jar and replicationcommunication.jar files from hotfix package to the directory /opt/SymantecDLP/Protect/lib/jar/.

cp aggregator.jar /opt/SymantecDLP/Protect/lib/jar/
cp replicationcommunication.jar /opt/SymantecDLP/Protect/lib/jar/


6. Start the 'Vontu Monitor' and 'Vontu Monitor Controller' services.

/etc/init.d/VontuMonitor start

 

 

 

Have more questions? Submit a request

0 Comments

Please sign in to leave a comment.