Upgrade of ESA from 11.0.4-004 to 14.2

[gpsriramdc]

Hi All,

I have to upgrade ESA to the latest version. Current version is 11.0.4-004 . Unfortunately i couldn't see this version in the upgrade path.  Please suggest.

Thanks in Advance...

[Ken Stieers]

You won't be able to go directly to 14.x

Upgrade the 11.0 box to the highest that shows in the upgtade page (13.x?) Then run another upgrade to 14.x

[Lemat]

Try upgrading to the highest version "general deployment" available, then upgrade from it to then next version and so on?

[SriramV]

phoebe-11-0-4-004 --> phoebe-13-5-4-020 --> phoebe-14-0-2-020 --> phoebe-14-2-0-620
phoebe-11-0-4-004 --> phoebe-12-5-3-035 --> phoebe-14-0-2-020 --> phoebe-14-2-0-620
phoebe-11-0-4-004 --> phoebe-13-5-4-020 --> phoebe-14-0-1-033 --> phoebe-14-2-0-620
phoebe-11-0-4-004 --> phoebe-12-5-3-035 --> phoebe-14-0-1-033 --> phoebe-14-2-0-620
phoebe-11-0-4-004 --> phoebe-12-5-3-035 --> phoebe-14-0-0-698 --> phoebe-14-2-0-620
phoebe-11-0-4-004 --> phoebe-12-5-3-035 --> phoebe-14-0-0-692 --> phoebe-14-2-0-620

[gpsriramdc]

Hi Sriram,

Thanks for the input. Has any reference document for this upgrade steps ?

[Ken Stieers]

@charella posted this answer earlier this year...

https://community.cisco.com/t5/email-security/upgrade-ironport-cluster-12-devices/m-p/4632425/highlight/true#M23608

[gpsriramdc]

Hi Sriram,

Thanks for your efforts. In my setup, we have physical appliance C170 ( 1 No). I need to convert the ESA appliance from physical to virtual. 

To limit the outage , i plan to add the virtual ESA's in 11.X cluster. Then remove the physical ESA from the cluster since no support of C170 in 12.X onwards. 

In version 11, cisco cco has  only 11-1-0-131 which is higher to the current version. Also versions provided in the upgrade path (12-5-3-035 ,13-5-4-020, 14-0-2-020)  not available in CCO.

Could you please check this suggest again..

Thanks in Advance.

[SriramV]

11-1-0-131 - Build date Apr 21, 2018, released 4 yrs back and 11-0-4 was not there

11-0-4-004 - Build date March 3, 2021 - this was refresh MR for identrust cert change, for FIPS cust who are on 11-0-3

So there are no paths found from 'phoebe-11-0-4-004' to 'phoebe-11-1-0-131' to upgrade.

request to deploy 12-5-x and copy config. 

Please contact TAC team for help.