IBM Proventia Management SiteProtector

SiteProtector Migration Utility Guide

November 16, 2007

Overview
Introduction The SiteProtector Migration Utility migrates an established SiteProtector Site to a new hardware configuration. You typically migrate an established Site when it has grown beyond the capacity of its original configuration.
Important: You must perform a few manual tasks before and after you run the utility. Read this entire document before you start so that you understand the process.

Terminology

This document uses the following terms:

Term Source Site Destination Site Definition The Site from which you are migrating. The Site to which you are migrating.

In this document

This document contains the following topics:

Topic Before You Begin Supported and Unsupported Options Recommendations Prerequisites Running the Utility After You Run the Migration Utility Troubleshooting Page 2 3 4 5 6 7 8

IBM Internet Security Systems

1

SiteProtector Migration Utility Guide

Before You Begin

Introduction This topic provides background information about the SiteProtector Migration Utility to help you understand the process. The Migration Utility performs the following steps: 1. Detaches the database from the source Site and from the destination Site. 2. Backs up the destination Site database. 3. Copies the source Site database to the destination Site to create the destination Site database. 4. Attaches the destination Site database to the destination Site SQL instance. 5. Copies schema files from the source Site to the destination Site. 6. Distributes the authentication keys from the destination Site to all agents from the source Site. Restoring the source Site If you run the utility but do not perform the final migration steps, you can restore the source Site. This enables you to use the utility in a test environment where you may not want to perform the entire migration. Or, if an unanticipated problem prevents you from completing the migration process, you can restore the source Site. To restore the source Site, you must manually reattach the source database to the source Site. For more information, see article number 4057 in the IBM ISS Knowledgebase at
www.iss.net.
Important: Even though you can restore the source Site, you cannot use the Migration

What the utility does

Utility to create a failover system. Event data Your agents continue to send event data to the Event Collector during the migration processeven while the Migration Utility detaches your source Site database and copies it to the destination Site. The events collected during the migration remain in event queues until you finish the migration steps.
Caution: The System can lose event data if the database remains detached for an extended

time period. An agent could potentially accumulate a large number of events, surpassing the agents storage capacity.

SiteProtector Migration Utility Guide, Version 2.0, SP 6.1

2

Supported and Unsupported Options

Supported and Unsupported Options

Introduction This topic describes the platforms and configuration options that the Migration Utility supports. You can use the Migration Utility with source and destination Sites that run supported versions of the operating system. You can also migrate to SQL Server Sites that run on either the same or a later version of SQL Server than the source Site. For information about supported versions, see the SiteProtector System Requirements at http://www.iss.net/ support/documentation/index.php. The Migration Utility does not support configurations where either the source or the destination Site databases use SQL Server clustering. The Migration Utility does not support Cross Domain migration, so you cannot use the utility to migrate a source Site in one domain to a destination Site in another domain.
Note: This does not apply to agents. Agents may be in different domains.

Supported platform and options

Database clustering not supported Cross Domain migration not supported

SiteProtector Migration Utility Guide, Version 2.0, SP 6.1

3

SiteProtector Migration Utility Guide

Recommendations
Introduction Timing Considerations To improve the efficiency of your migration, perform the tasks described below. Consider the following when you chose a time to migrate your Site:

Migrate your Site when you can complete the final migration tasks immediately after you run the Migration Utility. Migrate your Site when network traffic is minimal to avoid losing events.

Database maintenance

Perform the database maintenance functions in SiteProtector that are designed to reduce the size of the database and optimize its performance.
Note: See the SiteProtector Configuration Guide for detailed instructions about performing

database maintenance. User permissions All default SiteProtector permissions should migrate from the source Site to the destination Site cleanly. If the users you have configured are on the same domain as both the source and the destination Sites, then the permissions should function properly after the migration. If you have set up permissions using user accounts, however, they may not function properly after the migration. The permissions will not function properly in the following situations, and you must create new versions after the migration:

The users on both the source and destination Sites are local users. The users on both the source and destination Sites are domain users and belong to different domains.

SiteProtector Migration Utility Guide, Version 2.0, SP 6.1

4

Prerequisites

Prerequisites
Introduction Prerequisites You must perform the tasks listed in the table below before you run the Migration Utility. The following table describes the prerequisites for running the Migration Utility:
Prerequisites Install SiteProtector and all its components on the destination Site. Important: The software versions of each component must be the same on both Sites. Shut down the following services on the destination Site: SiteProtector Sensor Controller Service on the SP Core (Application Server) computer SiteProtector Application Server Service on the SP Core (Application Server) computer SQL Server Agent (MSSQLSERVER) service on the database server

If the source Site is a Recommended installation, you must stop the SQL Server Agent (MSSQLSERVER) service on the source database server.

SiteProtector Migration Utility Guide, Version 2.0, SP 6.1

5

SiteProtector Migration Utility Guide

Running the Utility

Introduction If you have reviewed the recommendations and performed the prerequisites, you are ready to run the Migration Utility. To run the utility: 1. On the Application Server computer of the source Site, locate the path of the Migration Utility:
your_drive:\Program Files\ISS\SiteProtector\Application Server\bin
Note: If you have migrated from an earlier version of SiteProtector on your source Site, the path may be the following:

Procedure

your_drive:\Program Files\ISS\RealSecure SiteProtector\Application Server\bin

2. Double-click Migration.exe.

SiteProtector Migration Utility Guide, Version 2.0, SP 6.1

6

After You Run the Migration Utility

After You Run the Migration Utility

Introduction After you run the Migration Utility, you must perform additional tasks to finish the migration. You must configure the Data Source Name (DSN) that each Event Collector computer uses to communicate with the destination Site database.
Important: If you use more than one Event Collector, then you must update the DSN on each Event Collector computer.

Task 1: Adjust DSNs

To modify a DSN for the secondary Site Database: 1. On the Event Collector computer, click Start on the task bar, and then select Control Panel Administrative Tools Data Sources (ODBC). 2. In the ODBC Data Source Administrator window, select the System DSN tab. 3. Select RSNTEventCollector, and then click Configure. 4. Type the server name of the destination Site Database in the Server box, and then click Next. 5. Select With SQL Server authentication using a login ID and password entered by the user. 6. Select Connect to SQL Server to obtain default settings for the additional configuration options, and then type the user name and password that you use for the Event Collector computers. 7. Click Next. 8. In the ODBC Microsoft SQL Server Setup window, click Test Data Source. If the connection is configured properly, the following message appears: TEST COMPLETED SUCCESSFULLY! 9. Click OK. Task 2: Set up permissions If your user accounts did not transfer automatically from the source Site, you must set up the permissions with user accounts on the destination Site. See User permissions on page 4.

SiteProtector Migration Utility Guide, Version 2.0, SP 6.1

7

SiteProtector Migration Utility Guide

Troubleshooting
Deployment Manager on source Site is stopped After you migrate a Site, the status of the Deployment Manager from the source Site may appear as Stopped. To change the status of the Deployment Manager: 1. Reboot the Deployment Manager computer, and then check the status of the Deployment Manager. 2. If rebooting does not change the status of the Deployment Manager, then uninstall, and reinstall, the Deployment Manager, and all updates

Copyright IBM Corporation 1994, 2007. All Rights Reserved. IBM and the IBM logo are trademarks or registered trademarks of International Business Machines Corporation in the United States, other countries, or both. ADDME, Ahead of the threat, BlackICE, Internet Scanner, Proventia, RealSecure, SecurePartner, SecurityFusion, SiteProtector, System Scanner, Virtual Patch, X-Force and X-Press Update are trademarks or registered trademarks of Internet Security Systems, Inc. in the United States, other countries, or both. Internet Security Systems, Inc. is a wholly-owned subsidiary of International Business Machines Corporation. Microsoft, Windows, and Windows NT are trademarks of Microsoft Corporation in the United States, other countries, or both. Other company, product and service names may be trademarks or service marks of others. References in this publication to IBM products or services do not imply that IBM intends to make them available in all countries in which IBM operates.

SiteProtector Migration Utility Guide, Version 2.0, SP 6.1

8