Upgrading a Security Gateway with CPUSE

Notes:

  • In a CPUSE upgrade scenario, you perform the upgrade procedure on the same Security Gateway.

  • This upgrade method is supported only for Security Gateways that already run Gaia Operating System.

Important - Before you upgrade a Security Gateway:

Step

Instructions

1

Back up your current configuration (see Backing Up and Restoring).

2

See the Upgrade Options and Prerequisites.

3

Upgrade the Management Server and Log Servers.

4

Upgrade the licenses on the Security Gateway, if needed.

See Working with Licenses.

4

Schedule a full maintenance window to make sure you can make all the custom configurations again after the upgrade.

The upgrade process replaces all existing files with default files.

If you have custom configurations on the Security Gateway, they are lost during the upgrade.

As a result, different issues can occur in the upgraded Security Gateway.

Procedure:

  		1.

    Important - You must reboot the Security Gateway after the upgrade or clean install.

    Installation Method

    Instructions

    Upgrade to R80.40 with CPUSE

    See Installing Software Packages on Gaia.

    Follow the applicable action plan for the local or central installation.

    In local installation, select the R80.40 package and perform Upgrade. See sk92449 for detailed steps.

    Clean Install of R80.40 with CPUSE

    See Installing Software Packages on Gaia.

    Follow the applicable action plan for the local or central installation.

    In local installation, select the R80.40 package and perform Clean Install. See sk92449 for detailed steps.

    Clean Install of R80.40 from scratch

    Follow Installing a Security Gateway - only the step "Install the Security Gateway".

    Important - In the Gaia First Time Configuration Wizard, for the Management Connection IP address, you must use the same IP address as was used by the previous Security Gateway (prior to the upgrade).

  2. Important - This step is required only if you performed a Clean Install of R80.40 on this Security Gateway.

    Step

    Instructions

    1

    Connect with SmartConsole to the R80.40 Security Management Server or Main Domain Management Server that manages this Security Gateway.

    2

    From the left navigation panel, click Gateways & Servers.

    3

    Open the Security Gateway object.

    4

    From the left tree, click General Properties.

    5

    Click the Communication button.

    6

    Click Reset.

    7

    In the One-time password field, enter the same Activation Key you entered during the First Time Configuration Wizard of the Security Gateway.

    8

    In the Confirm one-time password field, enter the same Activation Key again.

    9

    Click Initialize.

    10

    The Trust state field must show Trust established.

    11

    Click Close to close the Communication window.

    12

    Click OK to close the Security Gateway Properties window.

    13

    Publish the SmartConsole session.

  3. Step

    Instructions

    1

    Connect with SmartConsole to the R80.40 Security Management Server or Domain Management Server that manages this Security Gateway.

    2

    From the left navigation panel, click Gateways & Servers.

    3

    Open the Security Gateway object.

    4

    From the left tree, click the General Properties page.

    5

    In the Platform section > Version field, select R80.40.

    6

    Click OK.

  4. Step

    Instructions

    1

    Connect with SmartConsole to the R80.40 Security Management Server or Domain Management Server that manages this Security Gateway.

    2

    From the left navigation panel, click Gateways & Servers.

    3

    Install the Access Control Policy:

    1. Click Install Policy.

    2. In the Policy field, select the applicable Access Control Policy.

    3. Click Install.

    4. The Access Control Policy must install successfully.

    4

    Install the Threat Prevention Policy:

    1. Click Install Policy.

    2. In the Policy field, select the applicable Threat Prevention Policy.

    3. Click Install.

    4. The Threat Prevention Policy must install successfully.

  5. Step

    Instructions

    1

    Connect with SmartConsole to the R80.40 Security Management Server or Domain Management Server that manages this Security Gateway.

    2

    From the left navigation panel, click Logs & Monitor > Logs.

    3

    Examine the logs from this Security Gateway to make sure it inspects the traffic as expected.