Upgrading a Security Management Server from R80.10 and lower with CPUSE
In a CPUSE upgrade scenario, you perform the upgrade procedure on the same Security Management Server.
|
Notes:
|
|
Important - Before you upgrade a Security Management Server:
|
Procedure:
-
Upgrade the Security Management Server with CPUSE
See Installing Software Packages on Gaia and follow the applicable action plan.
-
Upgrade the dedicated Log Servers and dedicated SmartEvent Servers
If your Security Management Server manages dedicated Log Servers or SmartEvent Servers, you must upgrade these dedicated servers to the same version as the Security Management Server:
-
Install the management database
Step
Instructions
1
Connect with SmartConsole to the R80.40 Security Management Server.
2
In the top left corner, click . > Install database
3
Select all objects.
4
Click Install.
5
Click OK.
-
Install the Event Policy
Important - This step applies only if the SmartEvent Correlation Unit Software Blade is enabled on the R80.40 Security Management Server.
Step
Instructions
1
Connect with the SmartConsole to the R80.40 Security Management Server.
2
In the SmartConsole, from the left navigation panel, click Logs & Monitor.
3
At the top, click + to open a new tab.
4
In the bottom left corner, in the External Apps section, click SmartEvent Settings & Policy.
The Legacy SmartEvent client opens.
5
In the top left corner, click . > Actions > Install Event Policy
6
Confirm.
7
Wait for these messages to appear:
SmartEvent Policy Installer installation complete
SmartEvent Policy Installer installation succeeded
8
Click Close.
9
Close the Legacy SmartEvent client.
-
Reconfigure the Log Exporter
Step
Instructions
1
Connect to the command line on the server.
2
Log in to the Expert mode.
3
Restore the Log Exporter configuration as described in sk127653.
4
Reconfigure the Log Exporter:
cp_log_export reconf
5
Restart the Log Exporter:
cp_log_export restart
For more information, see the R80.40 Logging and Monitoring Administration Guide > Chapter Log Exporter.
-
In SmartConsole, install policy on all SmartLSM Security Profiles
Important - This step applies only if you enabled the SmartProvisioning Software Blade on this Management Server.
Step
Instructions
1
Install the Access Control Policy:
-
Click Install Policy.
-
In the Policy field, select the applicable Access Control Policy.
-
Select the applicable SmartLSM Security Profile objects.
-
Click Install.
-
The Access Control Policy must install successfully.
2
Install the Threat Prevention Policy:
-
Click Install Policy.
-
In the Policy field, select the applicable Threat Prevention Policy.
-
Select the applicable SmartLSM Security Profile objects.
-
Click Install.
-
The Threat Prevention Policy must install successfully.
For more information, see the R80.40 SmartProvisioning Administration Guide.
-
-
Test the functionality on the R80.40 Security Management Server
Step
Instructions
1
Connect with SmartConsole to the R80.40 Security Management Server.
2
Make sure the management database and configuration were upgraded correctly.