Device Control v9.1 Patch1

[redbaron51]

Hi all,

In our testing env. I have upgraded our ePO to patch 4 and installed Device Control 9.1

Tested a device block rule, everything working fine.

I want to upgrade DLP to 9.1 patch1 level before repeating the whole process on the production env.

Reading doc:

McAfee Host Data Loss Prevention 9.1.100

Installation Guide for ePolicy Orchestrator 4.5 and 4.6

I understand that I only need to:

1) Install extension HDLP_Extension_9_1_100_7.zip

2) Install extension help_dlp_911.zip

3) Deploy new agent to replace existing 9.1.0.522

4) Keep extension 9.1.0.504 so logged events stay there (when installing on production env. this will not be applicable)

Questions:

I) Have I missed anything? I do not think I need to run DLPWCFServiceInstaller.exe again, do I?

II) I logged to Mcafee's website using our grant number but i cannot find the file

help_dlp_911.zip, but only

help_dlp_910.zip;

Comments are much appreciated.

thanks,

rb51

[tonyw]

Though it is not specifically told to upgrade in the documentation, you will need to upgrade the WCF service as well.

[redbaron51]

Hi tony,

That was my suspicion (page 24 - dlp911 IG pdf)

The dlp911 IG pdf is quite misleading because it gives you instructions to upgrade from previous DLP (page 25-26) but does not tell about upgrading the DLPWCF service in the steps.

I am still trying to find file help_dlp_911.zip

[RickIA]

We have access via our grant to implement DLP 9.1. My question is we are only wanting to control access to cd/dvd/removeable storage stuff.  So I have to install the entire HDLP product in order to just focus on the hardware control ability? Seems like a nasty install from my initial readings...

[tonyw]

Device control and DLP have the same steps for installation.  The difference is in the available options in the policy after the product is installed.

[RickIA]

So I downloaded McAfeeDeviceControl91Patch1Licensed is this the correct file I need? I just noticed the installer documents where the same as the DLP which seemed like maybe the documentation was not correct or I had the wrong file.

[ErinC]

Hi RickIA,

I've just got DLP9.1 up and running with our ePO4.5 setup so I've just done this.

"McAfeeDeviceControl91Patch1Licensed" IS the file you want.  You will find two subfolders in there when you unzip it, one holds the agent files and one holds the server files.  The license key is also in the zip. (once you're up and running, in ePO simply go to Menu->Data Protection->DLP Policy then click Help->Update License and paste in the key).  Remember to import the Help extensions too.

[jmhernando]

We have HDLP 9.1 and we want upgrade to 9.1 patch 1.

How to update DLPWCF Service?

When I run the installation program, this indicates that the service port is in use (obviously), What should we do?, ¿uninstall and install?.

Thanks,

Jose.

[tonyw]

Yes, uninstall the DLP WCF Service from the server and install the new version.

[af77]

So, does this mean then that as a first step one should "upgrade" (uninstall v9 then install v9.1) of the WCF component ?

Is the 9.1 WCF Service backwards compatible with 9.0 agents ?