Upgrade Notes 7.0>8.0

Question 1

Pre-requisites

Answer 1

2 Enterprise Managers in standard deployment or High Availability

• currently running (permanent) EM
• temporary EM
• In HA environment (optional): remove HA from EMs and treat Active Node HA appliances as permanent and standby node as temporary EM

Virtual & Hybrid Systems need a new license when upgraded

• don’t make policy changes on the temporary EM because policies from permanent EM will be propagated
• Check Console User Manual for Backup, rollback and recovery tools

Question 2

Pre-Upgrade Steps (8 out of 12 steps)

Answer 2

1. Get License for temporary EM: contact license@forescout.com
2. Download and save module Installation file: Product Updates Portal (single appliance licensing), Customer Portal (Centralized Licensing)
3. Verify Remote Access to the TEmporary EM:
   - physical EM: access via RMM or KVM
   - virtual EM: access via VMWare/ESXi console
4. Get IP for Temporary EM
5. Set up Access
   - Allow temp EM to manage all appliances: the temporary EM must be listed on the permanent EM as allowed access. Options>Access>Console
6. Back up or clone permanent EM
   (save system settings, appliance/EM console settings, scheduled/saved web reports)
   - physical EM: Options>CounterACT Devices>BAckup>save
   - virtual EM: just clone the VM. ! If cloned EM interface fails a. DELETE file: /etc/udev/rules.d/70-persisten-net.rules.
   b. restart EM
7. Back up appliances
   Options>CounterACT Devices>BAckup>save
8. Install backed up settings on the Temporary EM
   virtual appliance: this is not requires
   physical appliance: see other flashcard

Question 3

Install Backed Up Settings on the Temporary EM

Answer 3

1. Install current version of permanent EM on your temp EM (do not configure)
2. Copy backup file from perm EM to USB
3. Power on temp EM and choose “2)Restore saved CounterACT configuration” then type “1”.
4. Booting temp EM for first time
   a. stop boot process to see the GRUB menu
   b. Enter single mode in GRUB
   c. Select the “kernel” to boot and type “e” to edit command
   >Type “s” to enter Single Mode
   > Type “b” to boot the temporary node
   > Change the temp EM IP address: fstool netconfig
   (! Do not restart the network or service)
   > Change the temp EM name: fstool netconfig -h some-temporary-name. this new host will be created after reboot

Question 4

Upgrade Appliance (steps 9-12)

Answer 4

9. Upgrade the Permanent EM
   Optionsl>Upgrade(Device Alert will show Version Mismatch wo other appliances. thats ok)
10. Connect temporary EM to t Network
    a. Verify EM runs in normal mode> runlevel (it must return “N” if not go throug backup settings again”)
    b. Reboot machine
    c. Install temporary license
    d. Type exit
    Now all appliance are managed by temp EM
11. Upgrade Appliances from the permanent EM (individually or as a group) This means old appliance will be managed by temp EM and upgraded appliances managed by upgraded perm EM
    a. >Options>CounterACT Devices> Select appliance to be upgreaded> Upgrade
    b. Verify Upgraded version works (see troubleshooting the upgrade flashcard)
    c. Upgrade remaining appliance and confirm operation.
    (d. optional: upgade mulptiple appliances from saved file with CLI commands.)
12. Shut down the temporary EM

Question 5

Troubleshooting the Upgrade

Answer 5

1. Error: Backed up appliance does not work correctly
   Restore it with tools
   a. Power on appliance and choose “2)Restore saved CounterACT configuration”
   b. Type “2)Restore from CD-Rom”
   c. Add directory where your restore “.fsb” file lives.
   (d. optional: It will ask if you want to restore in HA mode. say no)

Question 6

Gradually Upgrade High Availability Systems

Answer 6

Active node is used as permanent and standby node is temp EM. Process same upgrade process and note:

a. Get license for temp EM through as in step “Backup appliances”
b. Seperate HA EM Pair in 2 individual EMs
c. Upgrade EM via steps 9-12
d. Reestablish HA setup