Remove an old Symantec DLP installation after upgrading

[Dimitri Danishevski]

Hello everyone.
I can't find an explanation in the official documentation on how to properly completely remove an old Symantec DLP installation after upgrading.
Has anyone come across a KB article about it?

B.R
Dima

[Vikas Gaikwad]

Hello Dimitri Danishevski,

Hope you are doing well.

Could you please confirm which Symantec DLP version you would like to remove and which version you have upgraded to? This information will help us provide the appropriate guidance.

Please refer to the following Broadcom KB articles based on your upgrade scenario:

1. Removal of Older Versions of DLP Before DLP 15.8 After Upgrading
https://knowledge.broadcom.com/external/article/262346

2. Uninstalling Symantec Data Loss Prevention Version 15.1 After Upgrading to Version 15.5 on Windows
https://knowledge.broadcom.com/external/article/173164

3. DLP Quick Uninstall Guide for the Windows Agent
https://knowledge.broadcom.com/external/article?articleNumber=272496

4. How to Uninstall the Symantec DLP Endpoint Agent
https://knowledge.broadcom.com/external/article/170287

Once you confirm the source and target DLP versions, we can recommend the correct uninstall procedure and any additional steps that may be required.

Looking forward to your response.

Best Regards,
Vikas Gaikwad

[Dimitri Danishevski]

Hi Vikas
I'm upgrading from 16.0.1 to 26.1.

[Dimitri Danishevski]

To be more precise, the version is: 16.0.10000.60678
By the way, I'm very concerned about Article ID: 388902 https://knowledge.broadcom.com/external/article?articleNumber=388902
And now I'm interested not only in how to properly uninstall the previous version of Symantec DLP after Upgrade, but also in where I can find a complete list of Symantec DLP versions so I can see which hotfix is ​​installed.
And what are my correct actions in this situation, after upgrading from 16.0.10000.60678 to 26.1?

B.R
Dima

[Muhammad Atif]

Hello Dimitri,

Just upgrade to DLP 26.1. Once upgraded, take the backup and proceed with Uninstall. Recently performed with this activity but most of the versions were older - (14.6, 15.1, 15.5 and 15.7).

BR

Atif

[Dimitri Danishevski]

Hi Atif
First, thanks for the reply.
I'm writing an Upgrade LLD for a specific client and specific project.
As part of the requirements, I provided links to the manufacturer's documentation.
That's why I mentioned I couldn't find the relevant documentation.
Thanks again, and I hope someone can help me with this.

Sincerely,
Dima

[Tye Snyder]

Hello DImitri,

before you install 26.1 make sure you are on the most recent hotfix for the 16.x product branch, otherwise the uninstall will delete much needed directories as per Article ID: 388902.

Once you have upgraded to the hotfix you can upgrade, and once the upgrade is complete you can remove the old versions by simply going to add remove programs in Windows.

For further information on that please see:

Uninstalling Data Loss Prevention components

KR

Tye

[Dimitri Danishevski]

Hi Tye,
Thanks for your reply, but where can I download HF for 16.0.10000.60678?
Or is there no HF for 16.0.1 and what should I do in that case?

Thanks in advance.
Dima

[Tye Snyder]

Hello Dima,

Well now your in a sticky.

16.0.1 went out of service on the 20th, and the binaries were removed.

So now you have 2 choices, you can upgrade Enforce and then uninstall / reinstall all of your detection servers, or you can open a support case and request we provide you the files. 

You will first need MP1, and then need hotfix 16.0.1011.60591 (Upgraded DLP issues after 16.0 RU1 is uninstalled)

If you open a support case and request those binaries, stating you need them in order to upgrade to a supported version, we will track them down and deliver them to you.

Kind regards

Tye Snyder

[Dimitri Danishevski]

Hi Tye
Thank you so much for your comprehensive answer!!!
I'll open a case.
Am I correct in assuming this issue only affects Detection servers, or will I encounter the same problems after upgrading Enforce and uninstalling the previous version?

B.R.
Dima

[Tye Snyder]

Hello Dimitri,

The nature of the issue is that the uninstall removes the Symantec\DataLossPrevention\DetectionServer\Account-storage\

So that would be applicable to detection servers only.

However in that particular version the upgrade path is still to install upgrades on the Enforce server first.

So while the nature of the issue is in the MSI installer service, if you install MP1 on a detection server without installing on Enforce first there is a chance you could break communication, or other possible unexpected issues.

So while it may be possible to only install on the detection servers I cannot advise you to do that, and doing so would be at your own risk.

Kind regards

Tye Snyder