Update 11.3.1.1: Introduction

Document created by RSA Information Design and Development on Jul 9, 2019Last modified by RSA Product Team on Oct 1, 2019
Version 6Show Document
  • View in full screen mode

This document provides instructions to upgrade RSA NetWitness Platform. Read this document before deploying or upgrading to RSA NetWitness Platform 11.3.1.1. If you have questions or have any issues with this upgrade, contact Customer Support for assistance (https://community.rsa.com/docs/DOC-1294).

The instructions in this guide apply to both physical and virtual hosts (including AWS and Azure Public Cloud) unless stated to the contrary.

The following upgrade paths are supported for RSA NetWitness Platform 11.3.1.1:

Note: If your current hosts are on 10.6.x.x, you must first upgrade to 11.3.0.2, and then upgrade to 11.3.1.1. For information about upgrading to 11.3.0.2, see the "Installation & Upgrade Guides" section on RSA Link to find information about the types of systems you need to upgrade. Go to the Master Table of Contents to find all NetWitness Platform Logs & Network 11.x documents.

  • RSA NetWitness Platform 11.1.0.0 to 11.3.1.1
  • RSA NetWitness Platform 11.1.0.1 to 11.3.1.1
  • RSA NetWitness Platform 11.1.0.2 to 11.3.1.1
  • RSA NetWitness Platform 11.1.0.3 to 11.3.1.1
  • RSA NetWitness Platform 11.2.0.0 to 11.3.1.1
  • RSA NetWitness Platform 11.2.0.1 to 11.3.1.1
  • RSA NetWitness Platform 11.2.1.0 to 11.3.1.1
  • RSA NetWitness Platform 11.2.1.1 to 11.3.1.1
  • RSA NetWitness Platform 11.2.1.2 to 11.3.1.1
  • RSA NetWitness Platform 11.3.0.0 to 11.3.1.1
  • RSA NetWitness Platform 11.3.0.1 to 11.3.1.1
  • RSA NetWitness Platform 11.3.0.2 to 11.3.1.1
  • RSA NetWitness Platform 11.3.1.0 to 11.3.1.1

For more information about this release, see the Release Notes for RSA NetWitness Platform 11.3.1.1 on the NetWitness Platform documentation page on RSA Link. Go to the Master Table of Contents to find all NetWitness Platform Logs & Network 11.x documents.

You can upgrade to the 11.3.1.1 service pack using one of the following options:

  • If the NW Server host has internet connectivity to Live Services, the NetWitness Platform User Interface can be used to apply the patch.

  • If the NW Server host does not have internet connectivity to Live Services, the Command Line Interface (CLI) can be used to apply the patch.

Upgrade Considerations for ESA Rule Deployments

This section applies to upgrades from 11.1.x.x and 11.2.x.x to 11.3.1.1.

Caution: In NetWitness Platform 11.3 and later, the ESA Correlation service contains data source changes that require changes to migrated ESA rule deployments. The 11.3 ESA Correlation service replaces the Event Stream Analysis service in earlier versions.

After you upgrade to 11.3.1.1, migrated ESA rule deployments have the following changes.

  1. If an ESA rule deployment contains two services before you upgrade to 11.3.1.1, the deployment splits into two deployments. You can only have one ESA Correlation service in an ESA rule deployment in version 11.3.1.1.
  2. If an ESA service has multiple ESA rule deployments before you upgrade to 11.3.1.1, they are combined into one deployment in version 11.3.1.1.

You can still access your old deployments. For a detailed example, see the ESA Configuration Guide for RSA NetWitness Platform.

 

Next Topic:Instructions
You are here

Table of Contents > Introduction

Attachments

    Outcomes