000029710 - DLP Code Upgrade Paths & Best Practices

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by Yasmine Dowidar on Sep 27, 2017
Version 4Show Document
  • View in full screen mode

Article Content

Article Number000029710
Applies ToDLP all versions
IssueCode Upgrades
Resolution
Disclaimer:
This KB article includes best practice information for upgrading DLP systems under various scenarios.
It is meant to supplement but not replace DLP Upgrade Guides and Release Notes. If there are conflicts between this KnowledgeBase article and the official documentation, please use the official documentation or contact RSA DLP Support for guidance or clarification. 
Documentation:
What document should I use?
Use the DLP Upgrade Guide for the following procedures:
  • When performing new installations
  • When upgrading to a major release level such as DLP 9.5.0 or DLP 9.6.0
  • For instructions on how to install or upgrade to a major release level such as DLP 9.5.0 or DLP 9.6.0
  • DO NOT use the DLP Upgrade Guide for instructions on how to apply any Service Pack, Patch or Hot Fix
Use the DLP Release Notes for the following procedures:
  • For reference information regarding new features and bug fixes:
    •  When upgrading to a major new release level such as DLP 9.5.0 or DLP 9.6.0
    • When applying any Service Pack, Patch or Hot Fix
  • For instructions on how to apply any Service Pack, Patch or Hot Fix
Background:
To avoid problems with your DLP system, upgrades to these systems including the application of Service Packs and Hot Fixes, must be done in a specific order.
There are currently only 2 families of DLP code supported by RSA:  DLP 9.5 and DLP 9.6.
DLP 9.5:
Users can upgrade older systems running DLP 9.0 directly to DLP 9.5.0
Users running older systems of DLP 8.5, DLP 8.8 have to upgrade to DLP 9.0 before upgrading to DLP 9.5
Once a system has been successfully upgraded to the base level of DLP 9.5.0, you can then add Service Packs, Patches and Hot Fixes.
DLP 9.6:
Users can upgrade older systems running any version of DLP 9.0 P5 or DLP 9.5 directly to DLP 9.6.0
Users  running older versions of DLP 8.5, DLP 8.8 have to upgrade to DLP 9.0 P5 before upgrading to DLP 9.6
Note: DLP 9.6 does not support the old Dell 2950 Network appliances
Once a system has been successfully upgraded to the base level of DLP 9.6.0, you can then add Service Packs, Patches and Hot Fixes.
Service Packs:
Service Packs may be installed on top of any lower version of DLP code, within the same code family.
Example Service Pack upgrade paths:
DLP 9.5.0 -> DLP 9.5 SP1
DLP 9.6.0-> DLP 9.6 SP1
DLP 9.6.0 -> DLP 9.6 SP2
DLP 9.6 SP1 P1 -> DLP 9.6 SP2
Patches:
Patches may be installed on top of lower Patch versions of DLP code, however they must remain within the same Service Pack and code family.
Example Patch upgrade paths:
DLP 9.5.0 -> DLP 9.5 P1
DLP 9.6.0-> DLP 9.6 P1
DLP 9.6 SP2 -> DLP 9.6 SP2 P1 -> DLP 9.6 SP2 P2
DLP 9.6 SP2 -> DLP 9.6 SP2 P2
Hot Fixes:
Hot Fixes are created for specific issues and must be applied on top of the specified code Family, Service Pack and Patch version for which the Hot Fix was created.
Example Hot Fix upgrade paths:
DLP 9.5.0 -> DLP 9.5.0 HF7
DLP 9.5 SP1 -> DLP 9.5 SP1 HF5
What code version do you have now?
To determine your current code level, check the EM UI as follows:
Select the Admin tab -> Support -> About RSA Data Loss Prevention
Examples
DLP 9.5.1000 = DLP 9.5.0
DLP 9.5.1100 = DLP 9.5 SP1
DLP 9.6.1000 = DLP 9.6.0
DLP 9.6.1100 = DLP 9.6 SP1
DLP 9.6.1200 = DLP 9.6 SP2
DLP 9.6.1201 = DLP 9.6 SP2 P1
DLP 9.6.1202 = DLP 9.6 SP2 P2
Best Practices:  
  • Always download the latest version of the code you want to load from the SCOL website.
  • Do not use DLP code that was downloaded more than one month ago
  • If you cannot find the DLP Code that you need on the RSA SCOL website, please see KB article # a62628 for guidance
  • Before you start it is good practice to back up the DLP Database and the Enterprise Manager
  • Always stop all DLP services on each DLP component before running the installer on that component. This applies to EM, EC, REPC, EPC, NWC and all DLP NW appliances. If your EM is running Interop Services these should be stopped as well.
  • Always begin by upgrading the Enterprise Manager
  • Never skip upgrade steps unless directed to do so by DLP Support or DLP Engineering
  • Never attempt a fresh installation with any version of RSA DLP except for DLP 9.5.0 or DLP 9.6.0
  • If your system is running a Hotfix, do not assume the next version of DLP code contains that fix
  • Always use the Upgrade Manager to Publish the Upgrade after each code upgrade.  
 
 
 
 

Attachments

    Outcomes