Enterprise Security Manager (ESM) 9.6.1 MR1

[AtulHon]

Does anyone have the VM image of the Enterprise Security Manager (ESM) 9.6.1 MR1 ? Please share if possible.

We're badly in need of it. 

[David1111]

Ask McAfee's Support team

they have it for sure.

[akerr]

There's a very good chance McAfee support won't be able to share it.  Java licensing changed at 10.1 or 10.2 and they are unable to provide older images.  Definitely caused me some headaches.

[AtulHon]

Thanks mate !

By any chance you obtained the images from them or some other sources ? 

[rherbst]

akerr is correct - McAfee can no longer provide downloads for any version of ESM earlier than 10.2.0. See https://kc.mcafee.com/corporate/index?page=content&id=KB90199&actp=null&viewlocale=en_US&showDraft=f... for more details. 

[AtulHon]

Thanks All ! Yes, I agree

Would like to know if anyone on our community downloaded it earlier and is able to share it with me.

[AtulHon]

I have managed to obtain ESSREC_Update_9.6.1MR1.signed.tgz and Receiver_Update_9.6.1MR1.signed.tgz files. 

How do I use them ?

[akerr]

What exactly are you trying to do.  The files you have are for upgrading a ESM/REC combo, or a standalone receiver.  If you are trying to upgrade, you need to upgrade your entire environment to the same version of SIEM.  You don't want to just upgrade one component.

[AtulHon]

Yes, Understood Akerr !

Actually I want to restore some of the older logs but those were on the 9.6.1 MR1 and we are now using 10.3.1 in production so due to version difference I believe I won't be able to restore the logs.

I have a VM environment on the 10.3.1 version so would like to know if I can make use of these .tgz files to downgrade the SIEM

please advise if there are any other ways

[akerr]

No,  I don't belive the files you have will do what you want.  You'd need an image, not an upgrade, of 9.6.1 ESM to create a new instance of an ESM which you could then restore your backup.