Upgrade to Antigen 9.0 SP2
- Hi
I going to upgrade Antigen 9.0 SP1 to Antigen 9.0 SP2, and I have to following problem:
- I have a 4 node exchange 2003 sp2 cluster (3 active\1 passive)
- Antigen is install in the c:\ driver
- To use a share disk resource for antigen I need to uninstall Antigen 9.0 SP1 and install Antigen 9.0 SP2 with the cluster live starting from active node.
- We have lots of Filtering options configure (ex. about 100 subject line blocked, some file extension block as well)
My question how to I keep this configuration, I can´t use FCSSM because this options is only for Forefront for Exchange 10 (exchange 2007)?
Respostas
- Hi Tonaco,
Copying .adb files between installations isn't supported, I'm afraid. Template files (templates.adb) can be redeployed through FSSMC, however, so if you configured your filters within templates you should be alright.
Regarding the error that you're seeing, this is to be expected. The User Guide for FSSMC does clearly state that: "The Operations Job will not work with Antigen Version 9 products. Instead, use templates to make configuration changes in Antigen Version 9 products. For more information on deploying templates in FSSMC, see Deployment Jobs." Check the "Creating a template package" subsection on the same page instead. This will help you to deploy templates to multiple servers.
BTW, I'm not quite sure why you are planning to reinstall. You should be able to upgrade from Antigen 9 SP1 to SP2 on your cluster, without uninstalling SP1 first.
Kind Regards, Andy Day | CSS Security, Sr. Support Engineer (Antigen/Forefront Server Security)- Marcado como RespostaNick Gu - MSFTMSFT, Moderadorquarta-feira, 14 de outubro de 2009 1:36
- Marcado como RespostaTonaco quarta-feira, 14 de outubro de 2009 7:17
- Não Marcado como RespostaTonaco quarta-feira, 14 de outubro de 2009 7:17
- I know this is a late reply to your post, but wanted to let you know the way I exported content filters (subject-line and sender-domains) and file fliters from our previous installation Antigen 9. Check out Chapter 13 in the Antigen 9 User Guide at the following link: http://technet.microsoft.com/en-us/library/bb914073.aspx I used these steps to pull out a few years worth of custom filters from a soon to be legacy Sybari 8SR3 installation. It was very clean and worked out nicely in the end since I was able to import the filters into Antigen 9 SP2 crreating custom lists for each rather then a long running list of individual filters which is how it was setup originally. You can apply the content filtering to the template first whether it be realtime or internet and then apply it to all the scan jobs by running antigenstarter tc or you can also use the lists to create filter-set templates to apply to all or some scan jobs. Perhaps there is an easier way, but it worked out well for us.
Below is an excerpt from Chapter 13 pertaining to preserving or exporting filters:
Exporting sender-domains filters, file filters, and subject line filters (This should be done on the server you want to export the filters from)
The command line utility ExportLists facilitates the export of sender-domains filters, file filters, and subject line filters. Exported files are saved as text files that can then be imported into Antigen using the import function.
To export files from Antigen-
From the DOS command prompt, change directories until you are in the Antigen installation folder.
-
Enter: ExportLists [-s ServerName][-o OutputDirectory] and then press ENTER.
ServerName is the name of the server from which you are exporting the files, and OutputDirectory is the directory where you would like the exported files saved.
If no ServerName is entered, the utility defaults to the current server. Note that the system that this is executed on must have the same username and password as the system from which the lists are retrieved.
If no OutputDirectory is entered, that field defaults to the current directory.
A file will be created for each scan job and template that contains any file, sender, or subject line entries. The format of the files is as follows:
scanjobname-FILES.txt
templatename Template-FILES.txt
Where scanjobname is the actual scan job name and templatename is the actual template name.
-
Import the text files into Antigen by using the Import function described in Importing new items into a filter list.
Importing new items into a filter list
Filter lists can be created offline in Notepad or in a similar text editor, and then imported into the appropriate filter list by using the Antigen Administrator.
To create and import entries into a filter list-
Create a list and then save it as a text file. Place each filter on its own line in the file.
-
Open the Antigen Administrator and click Filter Lists on the FILTERING area of the Shuttle Navigator.
-
Select the filter list into which you will be importing data.
-
Click the Edit button. The Edit Filter List dialog box appears.
-
Click the Import button. A File Explorer window will open so that you can navigate to the text file that you created in step 1.
-
Select the file and click Open.
-
The file will be imported into the middle pane of the Import List editor so that you can select the entries that you would like to include in your filter list. Use the <=== button to move all the items into the Include In Filter section, or use the <--- button to move single items. You can use the right-pointing arrows to move items into the Exclude From Import section.
-
When you have moved all of the desired items, click OK.
-
Click Save.
-
- Marcado como RespostaTonaco quinta-feira, 14 de janeiro de 2010 15:13
-
Todas as Respostas
- Hi Tonaco,
Do you mean FSSMC (Forefront Server Security Management Console)? This product can manage both Forefront for Exchange 10 and Antigen for Exchange 9 installations.
Kind Regards, Andy Day | CSS Security, Sr. Support Engineer (Antigen/Forefront Server Security) Hi Andy,
Yes I was talk about FSSMC. Let me tell you how I tested, I started by removing Antigen 9 SP1 (no rollup), then install Antigen 9 SP2, and copied to the shared resource (driveletter:\AntigenCluster) the *.adb and quarantine folder. Is this a safe way to upgrade with out losing my configuration? Or is there a better way?In FSSMC when I create a “Operation Job” there is the following note:
“Note: This job only applies to Forefront 10 (including SP1) servers.”
So we cannot manager this operation in FSSMC.
- Hi Tonaco,
Copying .adb files between installations isn't supported, I'm afraid. Template files (templates.adb) can be redeployed through FSSMC, however, so if you configured your filters within templates you should be alright.
Regarding the error that you're seeing, this is to be expected. The User Guide for FSSMC does clearly state that: "The Operations Job will not work with Antigen Version 9 products. Instead, use templates to make configuration changes in Antigen Version 9 products. For more information on deploying templates in FSSMC, see Deployment Jobs." Check the "Creating a template package" subsection on the same page instead. This will help you to deploy templates to multiple servers.
BTW, I'm not quite sure why you are planning to reinstall. You should be able to upgrade from Antigen 9 SP1 to SP2 on your cluster, without uninstalling SP1 first.
Kind Regards, Andy Day | CSS Security, Sr. Support Engineer (Antigen/Forefront Server Security)- Marcado como RespostaNick Gu - MSFTMSFT, Moderadorquarta-feira, 14 de outubro de 2009 1:36
- Marcado como RespostaTonaco quarta-feira, 14 de outubro de 2009 7:17
- Não Marcado como RespostaTonaco quarta-feira, 14 de outubro de 2009 7:17
- I know this is a late reply to your post, but wanted to let you know the way I exported content filters (subject-line and sender-domains) and file fliters from our previous installation Antigen 9. Check out Chapter 13 in the Antigen 9 User Guide at the following link: http://technet.microsoft.com/en-us/library/bb914073.aspx I used these steps to pull out a few years worth of custom filters from a soon to be legacy Sybari 8SR3 installation. It was very clean and worked out nicely in the end since I was able to import the filters into Antigen 9 SP2 crreating custom lists for each rather then a long running list of individual filters which is how it was setup originally. You can apply the content filtering to the template first whether it be realtime or internet and then apply it to all the scan jobs by running antigenstarter tc or you can also use the lists to create filter-set templates to apply to all or some scan jobs. Perhaps there is an easier way, but it worked out well for us.
Below is an excerpt from Chapter 13 pertaining to preserving or exporting filters:
Exporting sender-domains filters, file filters, and subject line filters (This should be done on the server you want to export the filters from)
The command line utility ExportLists facilitates the export of sender-domains filters, file filters, and subject line filters. Exported files are saved as text files that can then be imported into Antigen using the import function.
To export files from Antigen-
From the DOS command prompt, change directories until you are in the Antigen installation folder.
-
Enter: ExportLists [-s ServerName][-o OutputDirectory] and then press ENTER.
ServerName is the name of the server from which you are exporting the files, and OutputDirectory is the directory where you would like the exported files saved.
If no ServerName is entered, the utility defaults to the current server. Note that the system that this is executed on must have the same username and password as the system from which the lists are retrieved.
If no OutputDirectory is entered, that field defaults to the current directory.
A file will be created for each scan job and template that contains any file, sender, or subject line entries. The format of the files is as follows:
scanjobname-FILES.txt
templatename Template-FILES.txt
Where scanjobname is the actual scan job name and templatename is the actual template name.
-
Import the text files into Antigen by using the Import function described in Importing new items into a filter list.
Importing new items into a filter list
Filter lists can be created offline in Notepad or in a similar text editor, and then imported into the appropriate filter list by using the Antigen Administrator.
To create and import entries into a filter list-
Create a list and then save it as a text file. Place each filter on its own line in the file.
-
Open the Antigen Administrator and click Filter Lists on the FILTERING area of the Shuttle Navigator.
-
Select the filter list into which you will be importing data.
-
Click the Edit button. The Edit Filter List dialog box appears.
-
Click the Import button. A File Explorer window will open so that you can navigate to the text file that you created in step 1.
-
Select the file and click Open.
-
The file will be imported into the middle pane of the Import List editor so that you can select the entries that you would like to include in your filter list. Use the <=== button to move all the items into the Include In Filter section, or use the <--- button to move single items. You can use the right-pointing arrows to move items into the Exclude From Import section.
-
When you have moved all of the desired items, click OK.
-
Click Save.
-
- Marcado como RespostaTonaco quinta-feira, 14 de janeiro de 2010 15:13
-
