Version Update 3.0-9
Infolock is pleased to announce the immediate release of IDACT (INSIGHT DLP Appliance Configuration Tool) version 3.0-9. This release provides the following:
- New feature enhancements and bug fixes.
- Support for Symantec DLP v15.8.002 (MP2)
- Stability improvements.
- An update for the IDACT OS on the INSIGHT appliance, Enforce, and all running Linux detection servers.
Important Notes
- The INSIGHT Web UI services must be enabled and running before this IDACT update.
- Verify that all servers (Appliances and SDLP VMs) have internet access to repool7.insightdlp.com over ports 80 (default) or 443. If you plan to use port 443 for IDACT updates, please review Update Repo from port 80(HTTP) to 443(HTTPS).
**Please note that moving forward starting with the next IDACT update 3.0-10, you will only be able to reach our INSIGHT repositories via port 443(HTTPS) - If using a proxy, please verify the below files on each host and VM is configured correctly:
- /etc/yum.conf
- /etc/wgetrc
- It is recommended to verify you have backed up all modified or customized scripts prior to completing the IDACT update.
- It is recommended to review all modified or customized scripts to verify that your previous changes are still applied after the IDACT update, if not reapply the changes.
- It is recommended that after every IDACT update the Appliance and SDLP VMs be restarted/rebooted.
Release Scope
This release will only update the underlying OS and IDACT software - it will not upgrade your DLP release. If you require a DLP release upgrade on your INSIGHT appliance, please find the latest Upgrade Guide version within the support portal at INSIGHT 15.8.002 Upgrade Guide.
Before Upgrading Symantec DLP or IDACT Firmware
We strongly recommend you check the INSIGHT DLP Appliance Support Matrix before attempting to upgrade the Symantec DLP software and/or the INSIGHT DLP Appliance IDACT firmware. This is to determine if the desired version is supported on your appliance model.
Failure to abide by the supportability matrix may put your INSIGHT DLP Appliance into an unsupported configuration, resulting in incompatibility-related issues or failures.
We also strongly recommend you make note and take screenshot of important settings, as it is possible for IDACT updates to revert or change some customer settings. Such as backup time and or customized backup scripts.
To Update the IDACT Version
A. Via SSH:
*When using SSH to do updates you will be able to see the output of running updates and related errors.
- Log into each Infolock INSIGHT DLP Appliance via SSH as Appuser.
- Issue the following command: update
- Issue the following command again: update
*For this current version please run "update" twice
or B. Via Appliance WebUI:
*When using Appliance WebUI to do updates you will not see output of running update.
- Log into each Infolock INSIGHT DLP Appliance WebUI as Appuser.
- Navigate to the "Device List" page
- Select: Update OS
*Please allow up to 30 minutes for this first update to complete before executing it again. - Select: Update OS
*For this current version please run "Update OS" twice
*If there are any errors or warnings please re-run "update"
* It is recommend that you run KernelFix.sh to fix any kernel issues on all Appliances and VMs (Enforce and Detection servers). See section "After Updating" below for more details.
*If the Appliance Web UI does not start after the update, please reboot the Appliance host. Please see below.
After Updating
A. It is recommended that you run the below to fix any kernel issues, on all Appliances and VMs (Enforce and Detection servers):
As protect user on the appliance: |
OR | As appuser on the VMs (Enforce and Detection servers): |
Run sudo /opt/appliance/KernelFix.sh | Run sudo /opt/appliance/KernelFix.sh |
B. It is recommended to always restart/reboot after every IDACT update. Please reboot the Appliance host and all running SDLP servers via the Appliance WebUI or SSH.
As appuser via Appliance WebUI |
Navigate to Device List and select server then select restart |
================= OR =================
As appuser via SSH to the Appliance |
AND | As appuser via SSH to Enforce and Detection server VMs |
Run restart Appliance |
Run sudo shutdown -r now |
C. If the Appliance Web UI does not start after the update, please reboot the Appliance host or log into it via SSH and take the following action.
As appuser | OR | As protect user |
Run service_restart | Run sudo service appliance-web restart |
Obtaining Support
If you require technical assistance with this issue, have any questions, or require further information, please contact the Infolock Support Team at support@infolock.com or via https://support.insightdlp.com.
Regards,
Infolock Support Team
support@infolock.com
=====================================================================
IDACT 3.0-9 Change log:
Appliance:
- Minor updates
- Added Archive Backup to Appliance WebUI, to allow customers to offload backups to another INS Appliance Enforce. Article: https://insightdlp.zendesk.com/hc/en-us/articles/1500000249061
- Added new feature to download logs via AppUI (https://support.insightdlp.com/hc/en-us/articles/4411059537939)
- Added new feature to enable or disable http/s in the repository pointer file (https://support.insightdlp.com/hc/en-us/articles/4407135943699)
- Added RemoveTmpOldFiles.sh (https://insightdlp.zendesk.com/hc/en-us/articles/4498003195027)
Enforce:
- Minor updates
- Update to backup.sh to fix SDLP service stop and start failures
- Added a modified version of remove_dlp_log4j.sh (https://support.insightdlp.com/hc/en-us/articles/4425966406931)
- Added RemoveTmpOldFiles.sh (https://insightdlp.zendesk.com/hc/en-us/articles/4498003195027)
- Updated to Oracle19c_Patch_PSU.sh for Jan 2022 PSU. (https://support.insightdlp.com/hc/en-us/articles/360021855113)
- Added support for SDLP 15.8.002 (MP2). EnforceSDLP1582UpgradeScript.sh. (https://insightdlp.zendesk.com/hc/en-us/articles/4847015940499)
Detection:
- Minor updates
- Added a modified version of remove_dlp_log4j.sh (https://support.insightdlp.com/hc/en-us/articles/4425966406931)
- Added RemoveTmpOldFiles.sh (https://insightdlp.zendesk.com/hc/en-us/articles/4498003195027)
- Added support for SDLP 15.8.002 (MP2). DetectionSDLP1582UpgradeScript.sh. (https://insightdlp.zendesk.com/hc/en-us/articles/4847015940499)
0 Comments