Installation guide

Chapter 12 Upgrading

Upgrading Legacy IPS Engines

Prior to version 5.4, IPS engines consisted either of separate Sensor and Analyzer engines, or

combined Sensor-Analyzer engines. In version 5.4, the Analyzer functionalities have been

transferred to the Log Server and to the Security Engines, and the Analyzer is no longer used.

Because of this change, additional steps are required for upgrading legacy Sensors, Sensor

Clusters, and combined Sensor-Analyzers to version 5.4 or higher. To begin the upgrade,

proceed to the relevant section below:

Upgrading Sensors and Sensor Clusters

 To upgrade Sensors and Sensor Clusters

1. Upgrade the engine software as instructed in Upgrading Engines Remotely (page 119).

2. Open the properties of the upgraded engine or engine cluster.

3. Make sure a Log Server is selected.

4. Select None for the Analyzer.

5. Click OK.

6. Refresh the policy of upgraded engine to make sure any possible changes specific to the

new software version are transferred to the engine.

Upgrading a Legacy Sensor-Analyzer to a Single IPS Engine

When you upgrade a legacy Sensor-Analyzer engine, you convert the combined Sensor-Analyzer

into a Single IPS element. The Analyzer element is automatically removed during the conversion.

 To upgrade a legacy Sensor-Analyzer to a Single IPS engine

1. Select Monitoring→System Status. The System Status view opens.

2. Expand the Sensor-Analyzer element until you can see the Sensor and Analyzer nodes.

3. Upgrade the engine software as instructed in Upgrading Engines Remotely (page 119).

4. Right-click the Sensor-Analyzer element and select Configuration→Upgrade to Single IPS.

The Sensor-Analyzer properties dialog opens.

5. Select the Log Server to which event data is sent.

What’s Next?

 Upgrading Sensors and Sensor Clusters

 Upgrading a Legacy Sensor-Analyzer to a Single IPS Engine (page 120)

Note – If you are upgrading a legacy Sensor Cluster, upgrade all the nodes of the cluster

before proceeding to Step 2.

What’s Next?

 Upgrade any other legacy Sensors or Sensor Clusters in the same way, then proceed to

Removing Unused Analyzer Elements (page 121)