Skip to content
  • There are no suggestions because the search field is empty.

How to Replace an RSA NetWitness Appliance while Retaining Internal Storage Data

Issue

How to Replace an RSA NetWitness Appliance while Retaining Internal Storage Data.
Replace a customer's RMAed NetWitness appliance while retaining as much customer data as possible from its internal storage.

Workaround

An RSA NetWitness appliance without attached external storage has been RMAed and must be replaced with a new appliance.

Resolution

Refer to the document entitled Security Analytics - Replacing Customer Appliances for detailed instructions on how to perform the procedure.

For instructions on performing the replacement procedure on an appliance with attached external storage using RSA Security Analytics, refer to the knowledgebase article How to Replace an RSA Security Analytics Appliance while Retaining External Storage Data.



Internal Comments

UserName:shurtj
2/26/2014 10:54:10 PM - Solution Created
Created solution a64314 as an internal solution to reference the document "Security Analytics - Replacing Customer Appliance" per request from Mike Guidotti. Document can be found here: https://knowledge.rsasecurity.com/patches/attach/nw/a64314/a64314-Security_Analytics_-_Replacing_Customer_Appliance.pdf

UserName:shurtj
2/26/2014 11:50:33 PM - Additional Document Added
Added the "RSA Security Analytics Emergency Appliance Recovery Procedure" document to the solution. Document can be found here: https://knowledge.rsasecurity.com/patches/attach/nw/a64314/a64314-RSA_Security_Analytics_Emergency_Appliance_Recovery_Procedure.pdf

UserName:shurtj
2/27/2014 2:28:49 PM - Separated Into Two Solutions
Per request from Mike Guidotti, separated the documents into two separate solutions, as one discusses replacements without external storage attached, while the other discusses replacements with an attached DAC. The second solution is a64332.

UserName:shurtj
4/11/2014 9:12:17 PM - Updated URL to Attachment
Updated URL to PDF attachment so that it can be accessed via the Primus interface and not just SCOL.

UserName:shurtj
8/5/2014 8:44:21 PM - Minor Changes
Minor changes to the article.


Product Details

RSA NetWitness NextGen
RSA Security Analytics
RSA Security Analytics Decoder
RSA Security Analytics Log Decoder
RSA Security Analytics Concentrator
RSA Security Analytics Hybrid
RSA Security Analytics Broker
INTERNAL ONLY!!!