Skip to main content

LevelBlue Completes Acquisition of Cybereason. Learn more

LevelBlue Completes Acquisition of Cybereason. Learn more

Services
Cyber Advisory
Managed Cloud Security
Data Security
Managed Detection & Response
Email Security
Managed Network Infrastructure Security
Exposure Management
Security Operations Platforms
Incident Readiness & Response
SpiderLabs Threat Intelligence
Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Operational Technology
End-to-end OT security
Microsoft
Unlock the full power of Microsoft Security
Securing the IoT Landscape
Test, monitor and secure network objects
Why LevelBlue
About Us
Awards and Accolades
LevelBlue SpiderLabs
LevelBlue Security Operations Platforms
Security Colony
Partners
Microsoft
Unlock the full power of Microsoft Security
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Loading...
Loading...

HOWTO: Moving WebMarshal to a new server

Expand / Collapse


This article applies to:

  • WebMarshal 6.X or 7.X

Question:

  • How do I move WebMarshal to a new server?

Procedure:

This article provides an overview of the steps required to move a WebMarshal 6.X or 7.X installation to a new server.

The instructions below are for WebMarshal stand-alone single-server installations.

  • For some suggestions about Array installations, see the Notes below.
  • These instructions are NOT appropriate for any ISA installation.

To move WebMarshal to a new server and maintain your configuration (rules and settings):

  1. On the new system, install the same WebMarshal release (such as 6.5.3.4444) that you have on the old system.
    • See instructions in the User Guide. Remember to set up virus scanner on-access exclusions.
  2. Install any additional malware scanning software such as Sophos for Marshal.
  3. Export the configuration from the old server and then import the configuration to the new server.
    • Q10222 - How do I back up my WebMarshal configuration?
  4. Before committing configuration: Navigate to the Array Servers screen. On a single server installation you will see the previous server name listed with status "unknown". Delete this server.
    • On an array installation, you can retain any remote nodes that can be contacted.
  5. If you have set security settings for local accounts with the WebMarshal Security Tool, run the tool (from an administrator account) and create appropriate settings for local accounts on the new server.
    • Any security settings configured for domain accounts will continue to work, if the new installation is in the same domain.
  6. If you have changed or want to change the temp folder or logging folder paths, edit the appropriate service XML files.
  7. Verify that a full license key is installed. You may need to request a new key from LevelBlue using the Console (depending on the binding of the existing key).
  8. Verify that imported user groups are populated. The contents of imported groups are NOT included in the configuration import.
  9. If you are using database logging and the SQL Server location is changing, move the database.
    • Q10221 How do I back up my MailMarshal or WebMarshal database?
    • In the WebMarshal Console (Server and Array Properties | Database Logging), update the database location.
  10. Ensure access policy is enabled (the enabled state depends on the imported configuration).
  11. Make changes to firewall settings and client configuration to use the new server for web browsing.
  12. Shut down the old server.

Notes:

  • If you are using database logging, you MUST shut down the old server or at a minimum disable logging on the old server.
    • You will encounter errors if both installations are logging to the same location.
  • For Array installations:
    • Use the above steps to move the Array Manager. However, remember that malware scanning software is installed, and scanner exclusions are configured, on the processing nodes (not the Array Manager).
    • Processing node information is contained in the configuration import. If you are using the same node servers and they show as online in Array Servers, you do not need to take any further action.
    • To move processing nodes, it is easier not to attempt to keep the same node name. Install and connect new nodes, and then delete the old nodes. If you are using server groups, make sure the new nodes are in the appropriate groups.
    • You must make any changes to XML files for temp and logging locations on each node.
  • If you are using an upstream proxy connection and the upstream proxy has also changed, you must run the Proxy Server Wizard to update this information.
  • The User Guide PDF is installed with the product. You can also get the Guide from the WebMarshal documentation page.

To contact LevelBlue about this article or to request support:


Rate this Article:
     

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.