2.4 Deployment Considerations

This section provides an overview of the most important considerations for installing or upgrading Security Agent for UNIX.

Table 2-1 New Installations

Agents

Tool Recommended for New Installation

Secure Configuration Manager

UAM

Sentinel

UAM

Change Guardian

CG AM

Sentinel and Change Guardian

UAM or CG AM

SCM and Change Guardian, and Sentinel

Depends on the following factors:

  • With Change Guardian 4.2.1, use UAM

  • With Change Guardian 5.0 and later, upgraded from 4.2.1 without security communication profile changes, use CG AM

  • With Change Guardian 5.0 and later, upgraded from 4.2.1 and with security communication profile changes, new agent installation for SCM is not supported due to incompatible communication protocols.

  • With new installations of Change Guardian 5.0 and later, new agent deployment for SCM is not supported due to incompatible communication protocols.

IMPORTANT:With new installations of Change Guardian 5.0 and later, new agent deployment for SCM is not supported due to incompatible secure communication profile.

Sentinel and SCM

UAM

Table 2-2 Upgrade Paths for Agents With Change Guardian 5.0 Enabled

Existing deployment

Tool Recommended for Upgrade Deployments

Security Agent for UNIX 7.5 with Change Guardian 4.2.1 enabled

Upgrade using the following sequence:

  1. Upgrade Change Guardian to 5.0

  2. Migrate hosts. For more information, see Section 5.0, Migrating Hosts from UAM to CG AM.

  3. Use CG AM to upgrade agents to 7.5.1

Security Agent for UNIX 7.5 with Change Guardian 4.2.1 and Sentinel 7.x or 8.x enabled

Upgrade using the following sequence:

  1. Upgrade Change Guardian to 5.0

  2. Migrate hosts. For more information, see Section 5.0, Migrating Hosts from UAM to CG AM.

  3. Use CG AM to upgrade agents to 7.5.1

Security Agent for UNIX 7.5 with Change Guardian 4.2.1, SCM 6.x, and Sentinel 7.x or 8.x enabled

Upgrade using the following sequence:

  1. Upgrade UAM and all agents to 7.5.1. For more information see, Upgrading Security Agent for UNIX Using UAM.

  2. For Change Guardian, make cipher changes on Change Guardian 4.2.1 to ensure enhanced security on 7.5.1 agents.

  3. Upgrade Change Guardian to 5.0

Table 2-3 Upgrade Paths for Security Agent for UNIX 7.5.1 using UAM

Existing deployment

Notes

Security Agent for UNIX 7.5 with Change Guardian 4.2.1 enabled

Requires cipher changes on Change Guardian 4.2.1 because of enhanced security on Security Agent for UNIX 7.5.1.

Security Agent for UNIX 7.5 with Sentinel 7.x or 8.x enabled

-

Security Agent for UNIX 7.5 with SCM 6.x enabled

-

Security Agent for UNIX 7.5 with Change Guardian 4.2.1, SCM 6.x, and Sentinel 7.x or 8.x enabled

For Change Guardian agent, it requires cipher changes on Change Guardian 4.2.1 because of enhanced security on Security Agent for UNIX 7.5.1.