McAfee M-1250 Upgrade Guide - Page 33

Reviewing the Upgrade Considerations, Manager upgrade downtime window

Get McAfee M-1250 - Network Security Platform PDF manuals and user guides View all McAfee M-1250 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 33 highlights

Upgrading the Manager Preparing for the upgrade 4 Reviewing the Upgrade Considerations Review this section carefully before you commence the upgrade process: Manager upgrade downtime window The time required to upgrade the Manager depends on the size of your deployment and the size of your database. The Manager upgrade process alone can take an hour to complete. • OS upgrade downtime: Manager 6.0 is supported on Windows Server 2008 R2 (Standard Edition) 64-bit English and Japanese. If you plan to upgrade the OS, then factor this in when you estimate the downtime. After you upgrade the Manager, you need to upgrade the Sensor software to 6.0 as well. • How a Sensor functions during the upgrade downtime: While the Manager upgrades to 6.0, the Sensor (which has not yet been upgraded, and which loses connectivity to the Manager during the Manager upgrade) continues to inspect traffic and accumulate the latest alerts (up to 100,000 alerts) while the Manager is offline during upgrade. Note that the Sensor sends these alerts to the Manager when it re-establishes connectivity with the Manager. • Additional downtime for NAC: If you use the NAC feature, then note that post-upgrade you might have to re-configure some of your NAC settings. This could result in extended downtime for NAC. Database backup (before and after upgrade) It is critical that you perform a full backup of your database using the All Tables option both before and after the upgrade. Backing up prior to upgrade enables you to roll back to your 5.1 version should you encounter problems during upgrade. Backing up immediately following upgrade preserves your upgraded tables and provides a baseline of the 6.0 database that you upgraded to. Importantly, when you are backing up the database, there should not be any scheduled task running in the background. See Backing up Network Security Platform data. You cannot restore the database from a lower version Manager on a higher version Manager. See also Backing up Network Security Platform data on page 25 OS upgrade As mentioned above, the 6.0 Manager server can be hosted on a Windows Server 2008 R2 Standard Edition machine. However, it needs to be a 64-bit system. If you are currently using a 64-bit (X64 architecture) system, then you can upgrade the server OS as well during the 5.1 to 6.0 upgrade window. In case of 32-bit systems, a hardware upgrade may be required. Two approaches to an OS upgrade are discussed in Manager and OS upgrade. See also Manager and OS upgrade on page 37 Important note regarding I-series Sensors with NAC license For I-series Sensors, the NAC feature is not supported in 6.0. Therefore, an I-series Sensor configured for NAC in 5.1, does not enforce NAC when you upgrade the Manager to 6.0 and push the configuration update to the Sensor. If you have I-series Sensors configured for NAC, and you want to upgrade to 6.0, contact McAfee Support. McAfee® Network Security Platform 6.1 Upgrade Guide 33

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
Reviewing the Upgrade Considerations
Review this section carefully before you commence the upgrade process:
Manager upgrade downtime window
The time required to upgrade the Manager depends on the size of your deployment and the size of
your database. The Manager upgrade process alone can take an hour to complete.
•
OS upgrade downtime
: Manager 6.0 is supported on Windows Server 2008 R2 (Standard Edition) 64-bit
English and Japanese. If you plan to upgrade the OS, then factor this in when you estimate the
downtime. After you upgrade the Manager, you need to upgrade the Sensor software to 6.0 as well.
•
How a Sensor functions during the upgrade downtime
: While the Manager upgrades to 6.0, the Sensor (which
has not yet been upgraded, and which loses connectivity to the Manager during the Manager
upgrade) continues to inspect traffic and accumulate the latest alerts (up to 100,000 alerts) while
the Manager is offline during upgrade. Note that the Sensor sends these alerts to the Manager
when it re-establishes connectivity with the Manager.
•
Additional downtime for NAC
: If you use the NAC feature, then note that post-upgrade you might have to
re-configure some of your NAC settings. This could result in extended downtime for NAC.
Database backup (before and after upgrade)
It is critical that you perform a full backup of your database using the All Tables option both before
and after the upgrade. Backing up prior to upgrade enables you to roll back to your 5.1 version should
you encounter problems during upgrade. Backing up immediately following upgrade preserves your
upgraded tables and provides a baseline of the 6.0 database that you upgraded to. Importantly, when
you are backing up the database, there should not be any scheduled task running in the background.
See Backing up Network Security Platform data.
You cannot restore the database from a lower version Manager on a higher version Manager.
See also
Backing up Network Security Platform data
on page 25
OS upgrade
As mentioned above, the 6.0 Manager server can be hosted on a Windows Server 2008 R2 Standard
Edition machine. However, it needs to be a 64-bit system. If you are currently using a 64-bit (X64
architecture) system, then you can upgrade the server OS as well during the 5.1 to 6.0 upgrade
window. In case of 32-bit systems, a hardware upgrade may be required. Two approaches to an OS
upgrade are discussed in Manager and OS upgrade.
See also
Manager and OS upgrade
on page 37
Important note regarding I-series Sensors with NAC license
For I-series Sensors, the NAC feature is not supported in 6.0. Therefore, an I-series Sensor configured
for NAC in 5.1, does not enforce NAC when you upgrade the Manager to 6.0 and push the
configuration update to the Sensor. If you have I-series Sensors configured for NAC, and you want to
upgrade to 6.0, contact McAfee Support.
Upgrading the Manager
Preparing for the upgrade
4
McAfee
®
Network Security Platform 6.1 Upgrade Guide
33