IBM Support

Performing X-Press Updates (XPUs) on SiteProtector without an internet connection

Question & Answer


Question

How do you perform X-Press Updates (XPUs) on SiteProtector with no internet connection?

Answer

 
How to use the Manual Upgrader Utility (5:48)
This video teaches you where to download and how to use the Manual Upgrader utility for SiteProtector.
 

The instructions to download XPU files without an internet connection and apply the updates in SiteProtector are detailed below.
  1. Turn off automatic downloads in the X-Press Update Server. This stops SiteProtector from deleting what it believes are "old" catalog files (in this scenario, this is the catalog files that you place in the directories manually). Follow the instructions below to do this:
    1. Right click the X-Press Update Server from the Agent View and select Manage Policy.
    2. Open the Server Settings policy and uncheck Download from other X-Press Update Servers. Save and deploy the policy once the change has been made.
    3. Open the XPU Settings policy and uncheck Download updates automatically from the XPU tab. Save and deploy the policy once the change has been made.
    4. Once these policy changes are completed, go to the Agent View and check the Last Contact Time column for the X-Press Update Server. It should display a very recent time if it successfully heartbeats in after the policy changes. If the time has not been updated since you pushed the last policy out, refresh the Agent View with F5 to see if it updates. If it still has not, right-click the agent and select Refresh Agent. Once completed, ensure the last contact time updates.
  2. Turn off automatic file and catalog download on the SiteProtector Core. Follow the instructions below to do this:
  3. Right click the SiteProtector Core and click Properties.
  4. Click Agent Properties on the left side.
  5. Click the X-Press and Product Update tab.
  6. Under the File Download section, disable Auto Download.
  7. To save the changes, click Action > Save.
  8. Download the Manual Upgrader utility from the IBM Security Download Center by using the instructions in Technote 1436928: Where to download the Manual Upgrader. Using this utility, download the available updates for your sensors and SiteProtector components.
  9. Place the XPU files that are downloaded from the Manual Upgrader into the appropriate directories on the Application Server machine (or the X-Press Update Server machine if you are running a stand-alone installation). You can copy all the files that are downloaded by copying the Desktop, Proventia, and SiteProtector directories from the Manual Upgrader folder. These need to be copied to \Program Files\ISS\SiteProtector\Application Server\webserver\IHS\htdocs\XPU.
    Note: For SiteProtector 2.9 and earlier, replace the IHS directory with Apache2 as SiteProtector moved from Apache2 to IHS in SiteProtector 3.0. This is required for all paths in step 3 if you are still running 2.9 or earlier.
    Alternatively, you may copy specific files within the Manual Upgrader folders, as needed. Below is an explanation of each folder location and which files belong in each one:
    Note: Stand-alone X-Press Update Servers have the directory structure under \Program Files\ISS\SiteProtector\X-Press Update Server\webserver\IHS\htdocs\XPU\.
    • \Program Files\ISS\SiteProtector\Application Server\webserver\IHS\htdocs\XPU\Proventia\G-Series
      • Network IPS (GX) - only the firmware updates, not the content updates.
    • \Program Files\ISS\SiteProtector\Application Server\webserver\IHS\htdocs\XPU\Proventia\PAM
      • Server Sensor for AIX - content updates
    • \Program Files\ISS\SiteProtector\Application Server\webserver\IHS\htdocs\XPU\SiteProtector
      • Catalog files (for example, XPU_2_9.xml, ChecksumList.xml, RiskIndex.xml)
      • Policy Update files (for example, files that start with SPIS_POLICY_*, SPNS_POLICY_*, SPSS_POLICY_*, SPIA_POLICY_*)
      • Database update files (files that start with DB_XPU_*, SPDB_XPU_*)
      • SiteProtector component updates and service packs (examples: DB_SR_*, DepMan_*, RSEvntCol*, AgentManager*, ServicePack*)
      • Anything else that does not fall into the other directories
    • \Program Files\ISS\SiteProtector\Application Server\webserver\IHS\htdocs\XPU\Proventia\XGS-Series
      • Network Protection (XGS) - only the firmware updates, not the content updates
    • \Program Files\ISS\SiteProtector\Application Server\webserver\IHS\XpuSelf\SiteProtector
      • Catalog files for the X-Press Update Server's self-updates
    • \Program Files\ISS\SiteProtector\Application Server\webserver\IHS\XpuSelf\SiteProtector\UpdateServer
      • Update packages for the X-Press Update Server's self-updates
  10. If your updates are not currently showing as available and the catalog file is placed in the appropriate place, restart the Windows service that is called SiteProtector Sensor Controller Service on the Application Server machine. Make sure that no scheduled jobs are running when you restart the service or the jobs will be canceled. Within a few minutes, the Update Status should change indicating it is Out of Date. If your sensors go unknown during this time, this is normal and does not affect the functioning of the sensors. This forces the sensor controller to reread the catalog file to see if new updates are available.
  11. Perform the update for the Out-of-Date components by right-clicking the component and selecting Updates > Apply XPU. If you download all of the correct files and placed them in the appropriate directories on the X-Press Update Server, SiteProtector will successfully download the files from the X-Press Update Server and proceed with the installation.
    Note: The X-Press Update Server caches information about files it cannot download. If your download fails due to a misconfiguration, you must restart the SiteProtector Web Server service on each X-Press Update Server that is downloading the file. Otherwise, you will be required to wait 55 minutes after fixing the misconfiguration before the cached information is removed.

[{"Product":{"code":"SSETBF","label":"IBM Security SiteProtector System"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Xpress Update Server","Platform":[{"code":"PF033","label":"Windows"}],"Version":"Version Independent","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Historical Number

2760

Document Information

Modified date:
08 February 2021

UID

swg21434972