Windows based Manager: Frequently asked questions

  Here are answers to frequently asked questions.  

General

1. Can I continue to use my Windows Server 2008 setup for 10.1 upgrade?    

   No. You must upgrade to one of the following supported operating systems to use   Trellix IPS   10.1:  

   • Windows Server 2012  

   • Windows Server 2012 R2  

   • Windows Server 2016  

   • Windows Server 2019  

1. Why is   Trellix IPS migrating from MySQL to MariaDB?  

   Trellix as an organization has decided to migrate to MariaDB, and   Trellix IPS is adhering to all such compliance requirements.  

2. If an earlier version of the Central Manager/Manager, such as version 8.1, is still in use, do we provide the same version of the Manager with MariaDB in such instances?  

   Currently, there are no plans to provide a hotfix or an update release of the Manager version 8.1 with MariaDB. Instead,   Trellix recommends you to migrate to the Manager versions 9.1 or 9.2 or 10.1.  

3. Do Managers with MariaDB continue to support all current deployments of heterogenous Sensors without necessitating a Sensor software upgrade?  

   Yes. There will not be any disruption and all current deployments are expected to work after upgrading to a Manager version with MariaDB. For example, the 9.1 Manager version with MariaDB can manage 9.1 and 8.1 Sensors.  

4. For upgrades from 8.1, 9.1, or 9.2, will migration from MySQL to MariaDB apply to Managers based on both Windows and Linux?  

   Yes. Both flavors of the Manager (if they used MySQL database previously) will use MariaDB when upgraded to 10.1.  

5. If a customer does not want to make changes to their environment, do they require to plan for any tasks or outages?  

   In order to have the latest signatures and protection, and to adhere to compliance requirements which   Trellix is adhering to, we advise all customers to keep their software up to date.  

6. Can a Central Manager running MariaDB manage Managers running MySQL database and vice versa?  

   Trellix recommends you to have same database running in both Central Manager and the Managers in your network environment. That is, if you are running a Central Manager with MariaDB, then, as a best practice, you should use this Central manager only to manage Managers with MariaDB.  

   Note

   The Central Manager version lower than 9.2.9.12 cannot manage the Manager version 9.1.7.77.  

7. How do I upgrade an MDR pair with Managers running MySQL database to Managers running MariaDB database?  

   Trellix recommends you to suspend the MDR pair, upgrade the individual Managers, and then resume the MDR pair.  

8. Can I restore a backup taken from a Manager running MySQL database to a higher Manager version running MariaDB database?  

   The database backup taken from a Manager running MySQL can be restored on a higher Manager version running MariaDB provided both major versions are the same. For example, you cannot restore a database backup taken from 9.1.7.75 on 10.1.7.4.  

1. In an MDR setup, after upgrading the primary Manager to   10.1, can I switch over to make the primary active or do I have to first stop the secondary?    

   Trellix recommends you to suspend the MDR pair, upgrade the individual Managers and then resume the MDR pair.  

   For details, see   MDR Manager upgrade.  

2. Do I need to do any specific step after the upgrade to re-establish MDR?    

   No. It works automatically.  

3. After upgrading the Secondary Manager, do I need to import the database to secondary or will that happen when I re-establish MDR?  

   If you have suspended the MDR pair before the upgrade, the Manager will synchronize after MDR resumes.  

4. Do I need to reconfigure MDR to get primary and secondary into MDR again?    

   No. The MDR configuration is retained and will work automatically.  

5. In an MDR setup when will I see   Switch Over and   Switch Back?  

   • Switch Over: Available only when the Primary Manager is active. Clicking this will request that the Secondary Manager be active.  

   • Switch Back: Available only when the Primary Manager status is in standby mode. Clicking this will switch back from the Secondary Manager and make the Primary Manager active.  

6. In an MDR setup when will I see   Suspend MDR and   Resume MDR?  

   • Suspend MDR: Available only on the Primary Manager when in the active state. Clicking this will instruct the Secondary Manager not to monitor via MDR Status check and to resume MDR only when indicated.  

   • Resume MDR: Available only when the Primary Manager is in the suspended state. Clicking this will resume MDR mode when the MDR is suspended.