There is a complete set of documentation which is being released for RSA enVision 4.1. The release notes will have a complete set of What's coming up in this release.
Register for the "RSA xChange Session featuring an important new release, RSA enVision 4.1" event, which would provide you more information on this release.
Also, you can refer to the following links where we have talked about virtualization as well as provided a demo of it:
[DEAD LINK /message/601800#601800]http://rsaenvision.lithium.com/t5/RSA-enVision-SIEM-Log-Management/Announcing-RSA-enVision-4-1-in-a-Virtual-Infrastructure/td-p/8351
Be VERY aware of the password changing requirement. It cost me almost a whole day. I use RDP to get to my appliances and the docs say "Press Ctrl-Alt-Del" to get to the change password prompt for each ID. Maybe it's just me, but I have never been able to "Press Ctrl-Alt-Del" in an RDP session!! Must do it from the DRAC, which is painfully slow.
More importantly, get the default passwords from Tech Support ahead of time. (It is probably not wise to post tehm here.) I've used enVision for 5.5 years and had no idea what the default passwords for these IDs were. I can't stress this enough. It cost me hours collecting that info.
I have spent countless hours due to 4.1 breaking things in my environment. Our RCs stopped working, VAM became completely broken, LCs stopped talking to NAS.... it was a complete nightmare and its still not worked out yet. Has anyone else had similar issues?
*** Update - since posting this I have had contact with RSA and they are helping address the issues, most of which are fixed now. I would still recommend admins to take care applying 4.1 and have a thorough test plan in place.
Good to know they are finally getting on top of this silly problem.
FYI, I posted a powershell script for 4.0 in the Tools and Scripts section.
One thing which make me very "happy" after migration was related to NIC System account which was being locked from unknown reason. Two days later I have remembered that I need to change password in enVision GUI in domains for NIC Windows Service which was collecting logs from appliance Windows Logs.
Hi everyone, who already have upgraded their appliances from 4.0 to 4.1
I am going to upgrade it in near weekend, and i have the question:
Is it mandatory to change the password during upgrade? Or i can leave it old?
(Just i think it is not good idea to do two changes simultaneously. Because i guess the password change into RSA Envision procedure is also not so simple and required some experience as well)
As can i understand it is not obligatory, in any case, yesterday i can check it personally.
With this upgrade process, you don;t have to manually change the passwords for all the enVision default users. RSA has built the setup which ask you to type in your passwords for all the default user and the setup itself will change the passwords on all of your devices.
Keep in mind, don't change any passwords on your devices manually. Let the setup change it. DS gets the change first, and puts the lockbox files (which contains the password hashs) on all the nodes. Then, once you run the setup on nodes, it reads the lockbox files and update the passwords on the nodes.
Hope this helps.
Retrieving data ...