Release of the QRadar Network Insights 7.3.2 Patch 2 ISO (7.3.2.20190522204210)

These instructions are intended to assist you when you install QRadar Network Insights 7.3.2 Patch 2 by using an ISO file. This ISO can install QRadar, QRadar Risk Manager, QRadar Vulnerability Manager products at version 7.3.2 Patch 2.

See QRadar: Software update check list for administrators for a list of steps to review before you update your QRadar deployment.

Part 1. Installing the QRadar Network Insights 7.3.2 Patch 2 ISO

Procedure

1. Download the QRadar Network Insights 7.3.2 Patch 2 ISO (5+ GB) from the IBM Fix Central website: https://www-945.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+Security+QRadar+Incident+Forensics&fixids=7.3.2-QRADAR-QIFFULL-20190522204210&function=fixId&parent=IBM%20Security NOTE: QRadar Incident Forensics and QRadar Network Insights use the same ISO for both products to install 7.3.2 Patch 2.
2. Use SSH to log in to the Console as the root user.
3. Use SSH to log in to the QRadar Network Insights appliance.
4. To run the ISO installer on the Console, type the following command: /media/cdrom/setup
   Important: Installing QRadar Network Insights 7.3.2 Patch 2 can take approximately 1 to 2 hours.

5. Wait for the installation to complete.

A summary of the ISO installation advises you of any issues. If there are no issues, you can now SSH to managed hosts and start the installer on each host to run the setup in parallel.

Part 2. Installation wrap-up

1. After all hosts are updated, send an email to your team to inform them that they will need to clear their browser cache before they log in to the QRadar Network Insights SIEM interface.
2. To unmount the /media/cdrom directory on all hosts, type: umount /media/cdrom"
3. Delete the ISO from all appliances.
4. Review any static routes or customized routing. As mentioned in the administrator notes, all routes were removed and will need to be reconfigured after the upgrade completes.
5. Review any iptable rules that are configured should be reviewed as the interface names have changed in QRadar Network Insights 7.3.2 Patch 1 due to the Red Hat Enterprise 7 operating system updates. Update any iptables rules that use Red Hat 6 interface naming conventions.