Introduction

This guide provides instructions on how to migrate an existing NetWitness Endpoint 4.4.0.x to NetWitness Platform 11.3 and later.

The migration broadly involves:

  • Planning and setting up NetWitness Platform. Contact your account manager for sizing the deployment. For more information on sizing guidelines, see the Virtual Host Installation Guide.

  • Importing file status, certificate status, and blocked hashes from NetWitness Endpoint 4.4.0.x to NetWitness 11.3 and later.

    Note: Endpoint scan and tracking data in the SQL database, users, IIOCs, custom queries, bad certificates, bad domains, bad IPs, and bad file hashes in NetWitness Endpoint 4.4.0.x cannot be migrated.

  • Upgrading 4.4.0.x agents to 11.3 and later.

For more information on the new features of NetWitness Endpoint, see the Release Notes.

Migration Flowchart

The following flowchart illustrates the migration process:

netwitness_migrationflowchart.png

Note: The instructions for each step is provided in the sections below.

How to Find the List of Documents

If you want to view the NetWitness Platform product documentation, use the following link:

https://community.rsa.com/t5/rsa-netwitness-platform/ct-p/netwitness-documentation/version/11.3