IBM Security QRadar

 View Only
  • 1.  Q-Radar Upgrade

    Posted Wed February 03, 2021 03:07 AM
    Hello, 

    As per the previous days, there are many vulnerabilities and issues in some of the Q-Radar versions and IBM had released many Fix packs for these issu So i would like to ask if I have a Q-Radar system version 7.3.3 fixpack 3, what is the pest practice for upgrading patch?
    is it mandatory to upgrade to the latest version (7.4.2 fix pack 2) or I can upgrade to (7.3.3 fix pack 7) ? and what is the impact of this upgrade on the Data and Events that cane be missed during the upgrade.

    thanks


    ------------------------------
    Moustafa Salah
    ------------------------------


  • 2.  RE: Q-Radar Upgrade

    IBM Champion
    Posted Wed February 03, 2021 05:43 AM
    Moustafa,

    you should at least apply 7.4.1 FP2 to get license fix. Pls refer to our BLOG at https://blog.pro4bizz.de/blogleser/waiting-for-a-valid-license-issue-important-to-know.html

    Our Best Practice is to apply latest FP , in your case 7.4.2 fix pack 2, after waiting for a 10 days security period in case it is pulled back by IBM in the mentime. Moreover check all app releases and release notes to make sure your implementation isnt affected by whatever new features. Especially if you got your own federation code, scripts etc. there is always a chance for side effects you didnt expect!

    BR
    Karl

    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------



  • 3.  RE: Q-Radar Upgrade

    Posted Wed February 03, 2021 07:27 AM
    Dear Karl,

    first i would like to thank you for your reply and kindly be informed that the version of my server is 7.3.3 FP 3 and as per the Flash notice of IBM regards
    https://www.ibm.com/support/pages/node/6395080

    on of the Solutions was to upgrade to v 7.3.3 FP 7 is it true or this solution is not solving the issue and I must to upgrade to 7.4.2 FP 2

    thanks



    ------------------------------
    Moustafa Salah
    ------------------------------



  • 4.  RE: Q-Radar Upgrade

    IBM Champion
    Posted Wed February 03, 2021 09:44 AM
    Moustafa,

    as outlined by Ralph before, 7.3.3 FP 7 does NOT solve the issue. You still must apply the workaround until you upgrade to 7.4.2 FP 2.

    Pls refer to https://www.ibm.com/community/qradar/home/apars/ where this warning has been implemented by IBM

    APAR WARNING

    Regards

    Karl

    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------