This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

2019.4 HF 6 and Symantec

We are attempting to get our 2019.4 HF 5 server running NCM 8.0 upgraded to HF 6 and Symantec found the same Sunburst virus/malware in the installation package. We had already implemented the HF 5 security fix so we could get our server out of quarantine and this put us right back in there. What other options do we have? Do we have to jump immediately to 2020.2.1 HF 2 to get a clean update?

  •  - You were on 2019.4 HF5, an impacted version, and you already updated to 2019.4 HF6, and you are saying that Symantec is flagging/ quarantining files?

    Can you share a screenshot of your footer?

    I would recommend pulling down the installer for 2020.2.1 HF2 (That's the Orion Platform Version we are after) - but NCM shows a similar version in the latest portal.

    jblankjblank_0-1608254727194.png

    This will replace those files.

  • We first applied the HF 5 security fix and had NCM up and running. As we were updating to HF 6 Symantec found Sunburst in the upgrade package as it was unpacked. We cancelled the update at that point but our server was then auto-quarantined and removed from the network, presumably by FireEye. We will have to make another attempt tomorrow after we get our data center and security folks to unlock our server. So I guess our best option is to try to jump straight to 2020.2.1 HF 2?