McAfee Host Intrusion Prevention 8.0 Patch 7 for Linux

Transcription

1 Release Notes McAfee Host Intrusion Prevention 8.0 Patch 7 for Linux For use with McAfee epolicy Orchestrator Contents About this release New features Resolved issues Installation instructions Known issues Find product documentation About this release This document contains important information about the current release. We strongly recommend that you read the entire document. The McAfee Host IPS 8.0 Patch 7 client package is for use on Linux 64-bit platforms only, unlike previous McAfee Host IPS packages that supported the Windows, Linux, and Solaris platforms. For Windows platforms, use McAfee Host IPS 8.0 Patch 7 for Windows. For all other platforms (Solaris and 32-bit Linux), use McAfee Host IPS 8.0 Patch 5. We do not support the automatic upgrade of a pre-release software version. To upgrade to a production release of the software, you must first uninstall the existing version. Release date October 30, 2015 Release build This release was developed for use with: McAfee Host Intrusion Prevention 8.0 Patch 7 for Linux 1

2 Purpose This release of McAfee Host IPS provides support for new platforms and minor bug fixes. See New features and Resolved issues for additional information. Package version Host Intrusion Prevention McAfeeHIPSforLinux Release-ePO.Zip Extension version Host Intrusion Prevention HOSTIPS_8000_Common.zip ( ) Use this extension for new installations and to update previous versions of Host Intrusion Prevention. McAfee epo versions supported This release supports the following McAfee epo versions: 5.1 and later McAfee Agent versions supported This release supports the following McAfee Agent versions: (1500 and later) and 5.x Rating Recommended McAfee recommends this release for all environments. This update should be applied at the earliest convenience. For more information about patch ratings, see McAfee KnowledgeBase article KB New features This release of the product includes these new features. Paravirtual Guest Support Paravirtual xen guests are supported and can be installed on Amazon instances. Paravirtual environments like Amazon Cloud and environments running Linux XEN kernel are supported with the Host IPS 8.0 Patch 7 for Linux release. This release provides support for 3.x kernels, mainly SLES 11 SP2, SP3, SP4 (HVM and PV), RHEL 7 and 7.1 (HVM), SLES 12 (HVM and PV). McAfee Agent support This release supports McAfee Agent 5.x. 2

3 Resolved issues These issues are resolved in this release of the product. For a list of issues fixed in earlier releases, see the Release Notes for the specific release. Version number and Host IPS properties are now updated on McAfee epo after the McAfee Agent 5.x is installed. ( ) Host IPS content update is now successful after McAfee Agent 5.x upgrade. ( ) 'hipus' process is successfully initiated. Kernel communication is successful after the McAfee Agent 5.x upgrade. ( ) Host IPS license status now shows appropriate status on the Linux server. ( ) Installation instructions Use these instructions to install, verify, and remove McAfee Host Intrusion Prevention 8.0 Patch 7 for Linux release. For more information about installing or upgrading the software, see McAfee Host Intrusion Prevention 8.0 Installation Guide. If you're running McAfee Host IPS on multiple operating system types, see the Patch 7 Known Issues article, available from KnowledgeBase article KB70778, for information about Patch 7 installation requirements in environments with mixed operating systems. Tasks Install the product directly to a client system on page 3 See the McAfee Host Intrusion Prevention 8.0 Installation Guide for details. Install the extensions on McAfee epo on page 3 Install the Host Intrusion Prevention extensions on McAfee epo server. Deploy the product from McAfee epo on page 4 Follow these steps to deploy this release to managed systems using McAfee epo. Verify the installation on page 4 After installing the Host Intrusion Prevention 8.0 Patch 7 for Linux package, verify that the product installed correctly on the client systems. File inventory Linux client on page 5 To query the contents of the Host Intrusion Prevention.rpm packages, enter the following command at the command prompt: Remove installation files on page 5 You can remove the Host Intrusion Prevention patch from McAfee epo or directly from the client computer. Install the product directly to a client system See the McAfee Host Intrusion Prevention 8.0 Installation Guide for details. Install the extensions on McAfee epo Install the Host Intrusion Prevention extensions on McAfee epo server. 3

4 Task For option definitions, click? in the interface. 1 In McAfee epo, select Menu Software Extensions. 2 Click Install Extension. 3 Browse to and select the extension HOSTIPS_8000_Common.zip file, then click OK. This process might take several minutes to complete. 4 Verify that the product name appears in the Extensions list. See the topic on bringing products under management in the McAfee epo Help. Deploy the product from McAfee epo Follow these steps to deploy this release to managed systems using McAfee epo. Before you begin This release requires McAfee Agent 4.8 or later. Task For option definitions, click? in the interface. 1 Check the package into the McAfee epo Master Repository: a Select Menu Software Master Repository, and then click Check In Package. b c d Select Product or Update (.ZIP), and then click Browse. Click Choose File and select the Host Intrusion Prevention.zip file: Patch McAfeeHIPSforLinux Release-ePO.Zip Click Next, then click Save. 2 Select Systems System Tree, then select the group of systems on which to install the client component. 3 Select Client Tasks, then select Actions New Task. 4 In the Task Builder wizard, name the task, select Product Deployment from the task list, then click Next. 5 Select the client platform, select Host Intrusion Prevention for Linux as the product to install, then click Next. 6 Schedule the task to run, click Next, then click Save. If you schedule the task to run immediately, perform an agent wake-up call. Verify the installation After installing the Host Intrusion Prevention 8.0 Patch 7 for Linux package, verify that the product installed correctly on the client systems. 4

5 Task For option definitions, click? in the interface. Restart your system after the upgrade if you are upgrading from previous Host IPS patches (4/5/6) to patch 7. This restart loads the new kernel modules from patch 7. 1 In McAfee epo, run the Host IPS: Client Versions query. For systems with Patch 7 installed, the Client Version (Host IPS) is: Click the version number to display the system names. 2 Verify the installation on the client: At the command prompt, enter /opt/mcafee/hip/hipts status. The output includes Host Intrusion Prevention Version After the installation, make sure you enable the IPS status Host IPS enabled from McAfee epo. This allows the policies to be sent across from McAfee epo. File inventory Linux client To query the contents of the Host Intrusion Prevention.rpm packages, enter the following command at the command prompt: rpm -qpl package_name.rpm package_name is the name of one of the rpm files for the version of Linux that you are installing. See the McAfee Host Intrusion Prevention Installation Guide for details. Remove installation files You can remove the Host Intrusion Prevention patch from McAfee epo or directly from the client computer. For information, see the McAfee Host Intrusion Prevention Installation Guide. Known issues For a list of known issues in this product release, see this McAfee KnowledgeBase article: KB Find product documentation After a product is released, information about the product is entered into the McAfee online Knowledge Center. Task 1 Go to the Knowledge Center tab of the McAfee ServicePortal at 2 In the Knowledge Base pane, click a content source: Product Documentation to find user documentation Technical Articles to find KnowledgeBase articles 5

6 3 Select Do not clear my filters. 4 Enter a product, select a version, then click Search to display a list of documents. Copyright 2015 McAfee, Inc. Intel and the Intel logo are trademarks/registered trademarks of Intel Corporation. McAfee and the McAfee logo are trademarks/ registered trademarks of McAfee, Inc. Other names and brands may be claimed as the property of others. 0-00