McAfee KnowledgeBase - How to upgrade NSP 6.1 to 7.

Page 1 of 3

United States - English

Log In
Contact Us

ServicePortal

Knowledge Center
Affected Products

How to upgrade NSP 6.1 to 7.1

Technical Articles ID:KB76434
Last Modified:5/30/2014
Rated:

Network Security Manager 7.1.x

Network Security Manager 6.x
Network Security Sensor Appliance 7.1.x
Network Security Sensor Appliance 6.x
Upgrade/Migrate

Environment
McAfee Network Security Manager 6.1, 7.1
McAfee Network SecuritySensor 6.1, 7.1
Summary
Perform the steps in this article to upgrade the Network Security Platform (NSP) from 6.1 to 7.1.
Solution
1. Performan All Tables Backup, using the Database Admin tool to back up theNSP data:
a. On the Manager, navigate to the<Network Security Manager install directory>\App\bin folder.
b. Execute the dbadmin.bat file to open the standalone database admin:
i. For Backup Type, selectAll Tables from the drop-down menu. This will back upthe entire Manager database,
including configuration, user activity, event, and trend tables.
ii. Name thebackup.You can use alphanumeric characters, including hyphens and underscores (example:
backup_01-10-13) andtype the path to the directory where you want to store the backup.
NOTE: If you do not specify a backup directory, the backup is stored in the default backup directory at <Network
Security Manager install directory>\App\Backups. If this folder does not exist,the tool will create a new
directory under <Network Security Manager install directory>\App.
iii. Type adescription of your backup in theComments field.
iv. Click Backup. When the backup is complete, the following message appears: Database backup successful.
NOTE: To viewbackup information, select the DB Restore tab. In the backup directory, you will find an XML file
(JAR format) with the backup file name that you specified. This file contains any backup comments you have
specified.
2. Upgradethe Manager:
a. Download the latest version of the 7.1.x.x NSM software from one of the following locations:
McAfee Downloads site: http://www.mcafee.com/us/downloads/downloads.aspx
Menshen: https://menshen1.intruvert.com
NOTE: You must have a valid McAfee grant number to log in to each site.
b. Extract the .exe file fromthe downloaded .zip.
c. Double-click the .exe file to start the installation.
d. Follow the prompts and enter the information as prompted.
e. Click Install to start the installation process. You will see a warning message that there are more than one million alerts in
the database andthat offline scripts must run to complete the migration process.
f. Click OK to complete the Installation Wizard.
3. Run theoffline scripts:
a. When the Manager upgrade completes,ensurethatthe Manager services are running,the Sensors are connected, and
alerts are generated.
b. Open a command-line session on the Manager.
c. Log in to MySQL by typing the following command, and then pressing ENTER:
<Network Security Manager install directory>\Mysql\bin\mysql -u<DB username> -p <DB password><DB name>

Print to PDF
without this message by purchasing novaPDF (http://www.novapdf.com/)
https://kc.mcafee.com/corporate/index?page=content&id=KB76434&actp=null&viewloc...

10/16/2014

McAfee KnowledgeBase - How to upgrade NSP 6.1 to 7.1

Page 2 of 3

For example: > mysql -u root -padmin123 lf

d. In the MySQL shell, typethe followingcommandand press ENTER:
mysql>source <manager install directory>\App\db\mysql\migrate\alertproc_offline_1.sql
If an SQL error message displays, stop the installation process and contact McAfee technical support with the details of
the message.
e. Stop the Manager service in the system tray by selectingNetwork Security Manager and clicking Stop Manager.
f. In the MySQL shell, type the following command and press ENTER:
mysql>source <manager install directory>\App\db\mysql\migrate\alertproc_offline_2.sql
If an SQL error message displays, stop the installation process and contact McAfee technical support with the details of
the message.
NOTE:The Manager upgrade process is not complete until you have run thealertproc_offline_2.sql script.
g. Start the Manager service in the system tray by selectingNetwork Security Manager and clicking Start Manager.
4. Downloadthe Sensor software and sigset:
a. Download the latest Signature Set from the McAfee Network Security Update Server (Update Server).
i. From the Resource Tree, selectManager,Update Server,Signature Sets.
ii. Download the latestSignature Sets.
IMPORTANT: Do not push the Signature Set to your Sensors yet.
NOTES:
See theNetwork Security Platform 7.1 Manager Administration Guide(PD23846) for full informationon
downloading the Signature Set.
For a list of currently supported protocols, see KB61036.
b. If you previouslycreated McAfee Custom Attacks,verify thatthose attacks are present in the Custom Attack Editor.
i. Select<My Company>/IPS Settings,Advanced Policies,Custom Attacks.
ii. SelectCustomer Attack Editor.
iii. Verify that all the attacks are present.
NOTES:
Ifno attacksare present, no Custom Attacks were previously created.
If any attacks are missing, you mustmanually recreate them after the upgrade.
c. SelectManager,Update Server,Software.
d. Select the applicable Sensor software version from the Software Available for Download section and click Download.
5. Push the Sensor software to your Sensors:
a. Select Device List,Software Upgrade.
b. Select the new version to bepushedto the Sensor.
c. To select a Sensor for update, select the checkboxfor the specific Sensor in the Upgrade column.
d. To select a Sensor for reboot, select the checkboxfor the specific Sensor in the Reboot column.
e. ClickUpgrade tostartthe process. This will push the Signature Set as well as the software to the Sensors.
NOTE: The Signature Set update canfail because of custom Snort rules that contain unsupported PCRE constructs. In
such cases, the Incompatible custom attack fault is raised on the Status page.
f. Wait for the push to complete.This process takes at leastfive minutes.
g. To check on the status of the upgrade:
i. Open a command-line session to the Sensor.
ii. Typedownloadstatus and press ENTER.
A completed update will display thefollowing Upgrade status:
Last Upgrade Status: Good
Last Update Time: (Time should reflect when the push is complete)
You will be prompted to reboot the Sensor upon completion of the Sensor software upgrade.
iii. Reboot the Sensor.
6. Verify the Sensor status:
a. When the Sensor reboots,selectDevice List,<Sensor Name>,Physical Device, Summary.

Print to PDF
without this message by purchasing novaPDF (http://www.novapdf.com/)
https://kc.mcafee.com/corporate/index?page=content&id=KB76434&actp=null&viewloc...

10/16/2014

McAfee KnowledgeBase - How to upgrade NSP 6.1 to 7.1

Page 3 of 3

b. Verify the Sensor's operational status is up andthe latest software versionandSignature Set have been installed
c. Use the Threat Analyzer to verify the performance of the Sensors to confirmthe upgrade was successful.
For information on how to check Sensor performance from the Threat Analyzer, Seethe Network Security Platform 7.1
Manager Administration Guide (PD23846).
Related Information
For contact details:
Go to http://www.mcafee.com/us/about/contact-us.aspx#ht=tab-techsupport and select your country from the drop-down list.
Alternatively:
Log in to the ServicePortal at https://support.mcafee.com:
If you are a registered user, type your User Id and Password, and click Log In.
If you are not a registered user, click Register and complete the required fields. Your password and login instructions will be
emailed to you.

Resources

Tools

Service Requests

Beyond ServicePortal

Product Documentation

McAfee Virtual Technician (MVT)

View Service Requests

Search Threat Library

Product End of Life (EOL)

Minimum Escalation Requirements (MER)

Create a Service Request

McAfee Customer Community

Support Documentation

Endpoint Encryption Code of the Day

Submit a Sample

Product Enhancement Request

Global Solutions Lab

Combine Extra.DAT Files

Training and Professional Services

My Company Entitlements

McAfee Support Notification Service (SNS)

Home and Home Office Technical Support

Careers Contact Us Website Feedback Privacy Legal Notices Legal & Contract Terms Site Map
2003-2014 McAfee, Inc.

Print to PDF
without this message by purchasing novaPDF (http://www.novapdf.com/)
https://kc.mcafee.com/corporate/index?page=content&id=KB76434&actp=null&viewloc...

10/16/2014