cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3653
Views
5
Helpful
19
Replies

Upgrade IronPort C360 from 7.6.3-019 to 8.5.6 build 106?

DISmekalin
Level 1
Level 1

Good day! Tell me, please, is it possible to upgrade c360 immediately to the new version through the GUI, from 7.6.3-019 to 8.5.6?

Is there a recommended order for this upgrade?

Or is it strongly recommended to do this from the command line (CLI)?

It is not clustered.

Thanks in advance.

1 Accepted Solution

Accepted Solutions

Robert Sherwin
Cisco Employee
Cisco Employee

You should be able to upgrade your appliance.  Recommendation is always to do it via the CLI, as this generates a better understanding and visual cues as to where you are at in the download and install process during the upgrade.  But - you can do it via the GUI as well.  In the end, it is the administrator's choice.

See the following TechNote, which may aide, answer questions:

http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118547-technote-esa-00.html

-Robert

View solution in original post

19 Replies 19

Robert Sherwin
Cisco Employee
Cisco Employee

You should be able to upgrade your appliance.  Recommendation is always to do it via the CLI, as this generates a better understanding and visual cues as to where you are at in the download and install process during the upgrade.  But - you can do it via the GUI as well.  In the end, it is the administrator's choice.

See the following TechNote, which may aide, answer questions:

http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118547-technote-esa-00.html

-Robert

Thank you for the answer.

Сould you tell me whether such a sharp transition between versions safely? May it make sense to first upgrade to any intermediate version?

I found the answer.

You can upgrade to release 8.5.6-106 from the following versions: • 7.6.3-019

From:

http://www.cisco.com/c/dam/en/us/td/docs/security/esa/esa8-5-6/ESA_8-5-6_HP3_Release_Notes.pdf

Is there a chance that after updating it will not work?

Given that "not work" could cover a multitude of sins, yes.

If your ESA is important to you then you already have a plan if it suffers unexpected physical failure. That plan needs to be checked to ensure that if something goes wrong, you have an acceptable path to recovery. An out-of-hours change window may be popular with your recipients but isn't much good if you have no dealer support until the next working day.

I've been through a number of upgrades with lower-series models and they've never gone disastrously wrong. However, for a major upgrade don't depend on a simple config restoration to get you out of trouble as some upgrades are one-way trips. Your config backup may be valid but it won't necessarily restore to a half or completely upgraded machine.

More practically, read all of the intervening release notes looking for minor changes to functionality as these can catch you out. In doing so, look for useful tips such as "this can be tight for disk space so empty out your quarantines".

DISmekalin
Level 1
Level 1

Finally, i updated successfully our C360. Thanks to all.

My plan:

1. In GUI save the configuration file

2. Connect using putty to ironport

3. Test connections to the following dynamic servers (hardware appliance):

  • telnet update-manifests.ironport.com:443
  • telnet updates.ironport.com:80
  • telnet downloads.ironport.com:80  

4. Disable reporting (diagnostic > reporting > disable)

5. I did not suspend the listeners, because we have only one ESA

6. Enter upgrade

7. On the questions i used the default answers.

8. Enable reporting (diagnostic > reporting > enable)

I updated to 8.5.6-106, and then to 8.5.7-043 (version for maintenance).

C360 is fully updated and antivirus is updating now.

Materials:

Upgrade AsyncOS Basic Procedure and Common Scenarios

ESA Upgrade Procedures

Upgrading two C370's in a cluster from 7.6.3-019 t0 8.5.6

Great - thank you for the update - happy to hear all worked out for you!

-Robert

Sorry, i have one problem after update. There is no one report on overview page. It writes:"Data is currently unavailable".

Now i have used reinitialization of the reporting database. But this procedure lasts for almost 12 hours with the status:"Reseting reporting data......"

Hi!

What browser are you using? if you are using internet explorer please implement the following workaround:

From the webUI(GUI) > System Administration > General Settings > Override IE Compatibility Mode > set it as enable.

Regards,

Raed

I have tried from the Google Chrome and Internet Explorer. There is the same reaction.

Override IE Compatibility Mode set as enabled.

Could you provide me with ipcheck command from the CLI