Running On Borrowed Time: Upgrade Symantec DLP From Oracle 11G To Oracle 12C Now!

Oracle is the backend for Symantec Data Loss Prevention (DLP). Oracle 11g has been the database provider for DLP since 2013 for DLP version 12.0. On 18th December 2018, Symantec released a tech note (Support for Oracle 12c SE2 with Symantec Data Loss Prevention 15 and steps for upgrading) detailing the end of life of Oracle 11g. Oracle 11g will no longer be supported as of 25 September 2018.

Oracle 12C Support for DLP 15

As of January 2018, Oracle 12c is supported for DLP 15. Unfortunately, this means that all DLP implementations built before January 2018 will need to be upgraded to Oracle 12c.

It is also recommended that all earlier implementations of DLP be upgraded to DLP 15 and that the database be upgraded to Oracle 12c.

Note: To ensure that you purchase the correct licenses, please talk to your Symantec or partner account manager

Back to the tech note. There is emphasis that all Oracle for Symantec DLP installations must not use more than two (2) CPU sockets. If more than two (2) CPU sockets are used, then the installation is not compliant with the Oracle license.

What does two (2) CPU sockets mean?

1 CPU socket is equal to 4 vCPUs. Therefore, with two CPU sockets, up to eight vCPUs are available. This is an important consideration when deploying a two-tier architecture (DLP and Oracle on the same host). Why? the reason is that the Oracle database is hosted on the same server as the Enforce server. The Enforce server does much of the heavy lifting and may require a significant amount of resources. The Enforce server has a minimum requirement of 4 vCPUs.

Oracle 12c Upgrade Considerations (If the Oracle server has two or fewer CPU sockets)

Running DLP 12.x

  • Upgrade to DLP 14.0 and then upgrade to DPL 14.6
  • Upgrade the database to Oracle 12c SE2 R2
  • Upgrade to DLP 15.0 (optional)

Running DLP 14.0 or 14.5

  • Upgrade to DPL 14.6
  • Upgrade the database to Oracle 12c SE2 R2
  • Upgrade to DLP 15.0 (optional)

Running DLP 14.6

  • Upgrade the database to Oracle 12c SE2 R2
  • Upgrade to DLP 15.0 (optional)

Running DLP 15.0

  • Upgrade the database to Oracle 12c SE2 R2

Oracle 12c Upgrade Considerations for a Two-Tier Installation (if the Oracle server has greater than two CPU Sockets)

Running DLP 12.x

  • Upgrade to DLP 14.0 and then upgrade to DPL 14.6
  • Migrate the database to a new server with a maximum of two CPU sockets, running Oracle 12c SE2 R2
  • Upgrade to DLP 15.0 (optional)

Running DLP 14.0 or 14.5

  • Upgrade to DPL 14.6
  • Migrate the database to a new server with a maximum of two CPU sockets, running Oracle 12c SE2 R2
  • Upgrade to DLP 15.0 (optional)

Running DLP 14.6

  • Migrate the database to a new server with a maximum of two CPU sockets, running Oracle 12c SE2 R2
  • Upgrade to DLP 15.0 (optional)

Running DLP 15.0

  • Migrate the database to a new server with a maximum of two CPU sockets, running Oracle 12c SE2 R2

Upgrading to Oracle 12c

The upgrade to Oracle 12c is covered in detail in the Symantec Data Loss Prevention Oracle 12c Standard Edition 2 Release 2 Installation and Upgrade Guide.

At a high level though, the upgrade process is as follows:

  1. Upgrade to DLP 14.6 or 15
    1. See the Symantec Data Loss Prevention Upgrade Guide for Windows (Version 14.6) guide
    2. See the Symantec Data Loss Prevention Upgrade Guide for Windows (Version 15) guide
  2. Backup the Oracle database
  3. Upgrade the Oracle database
    1. Obtain Oracle 12c license from your Symantec or partner account manager
    2. Oracle software can be downloaded from: https://fileconnect.symantec.com
    3. Upgrade Oracle from 11g to 12c.
  4. Perform functionality tests

During the upgrade, the Enforce console will be unavailable. However, the detection servers and DLP agents will continue to function as normal. When the Enforce/Oracle server come back online any incidents that have been detected will be uploaded.

Insentra is ready and able to help you with your upgrade to Oracle 12c. Time is of the essence. Please reach out to have your Oracle database upgraded before the 25 September 2018 deadline.

Join the Insentra Community with the Insentragram Newsletter

Hungry for more?

[Modern Workplace]

Getting Teams Going Fast

By [Edmund Davis]

We’re all in lock-down: in a few short weeks everyone is being forced to transition into a remote workforce and you’re being forced to provide the technology and techniques to make it all work.

[Modern Workplace]

Inactive Mailbox Licensing in Office 365

By [Priom Mashuk]

There may be a requirement to retain all mailbox data of employees who have left an organisation or have taken an extended leave of absence.

[Modern Workplace]

Citrix Remote Working Readiness Planning

By [Gary Cohen]

We are amid an event which is impacting us in ways we could not have predicted. Events are forcing us to make decisions based on a constant flow of changing information and we are all seeking guidance in one way or another to ensure we can weather the storm and keep our organisation’s productive.