topic Re: WSAs managed by SMA / Upgrade Procedure in Web Security

WSAs managed by SMA / Upgrade Procedure

spacemeb — Tue, 18 Jan 2022 14:57:50 GMT

Hello guys,

I am thinking to upgrade our WSAs from 12.5.1-043 to 14.0.1-053. First, we are going to upgrade our SMA to 14.1.0-227.

I need a little help with the below:

Since our configuration manager is on 12.5, how should I change it? what steps I need to follow?

To be honest, I don't feel comfortable/familiar with SMA, so please let me know what to do in order to have a successful upgrade.

Re: WSAs managed by SMA / Upgrade Procedure

balaji.bandi — Tue, 18 Jan 2022 15:20:38 GMT

yes first you need to upgrade SMA and check the compatability of WSA, at the same time of 14.X is not compatable with WSA 12.X version, then you need uplift WSA 14.X so SMA can manage WSA.

Upgrade need to done individually : SMA own upgrade, WSA own Upgrade.

Make sure you take the backup (not masked). (both SMA and WSA).

Once you upgrade to 14.X config manager changes.

Re: WSAs managed by SMA / Upgrade Procedure

Ken Stieers — Tue, 18 Jan 2022 15:36:27 GMT

Per the configuration matrix, you CAN support 12.5.1-043 WSA's https://www.cisco.com/c/dam/en/us/td/docs/security/security_management/sma/sma_all/SMA-ESA-WSA_Compatibility.pdf

Re: WSAs managed by SMA / Upgrade Procedure

spacemeb — Tue, 18 Jan 2022 15:37:12 GMT

So, it will change configuration manager automatically?

Re: WSAs managed by SMA / Upgrade Procedure

Ken Stieers — Tue, 18 Jan 2022 15:37:27 GMT

Upgrade the SMA first.
Initialize the 14.0 configuration master from your 12.5 configuration master.
Upgrade your WSAs.
Per the configuration matrix, you CAN support 12.5.1-043 WSA's with no issues. Page 75 in this doc:
https://www.cisco.com/c/dam/en/us/td/docs/security/security_management/sma/sma_all/SMA-ESA-WSA_Compatibility.pdf

Re: WSAs managed by SMA / Upgrade Procedure

Ken Stieers — Tue, 18 Jan 2022 16:24:27 GMT

No.
Upgrade the SMA. On the Web tab, under Utilities/Configuration Mangers and initialize the version you're going to. Then under Utilities/Security Services Display, click the Edit Display Settings... button at the bottom and then enable the version and make sure the config matches.
Upgrade the WSAs
Then back on the SMA under Management Appliance/Security Appliances, go into each WSA and make sure its assigned to the correct configuration master.