WSA S170 not rebooting after upgrade

[ashaw216]

  This will be the second upgrade of this appliance in which we've had this problem. Previously, we were upgrading from 7.5 to 7.7. The upgrade went through, we were told the appliance was rebooting, but the ping never died indicating that the device never went down during the reboot. Now we're upgrading from 7.7 to 8.0.7 and the same thing is happening. Last time I had to drive in a push the button on the appliance to turn it off, then back on again (shades of IT Crowd). Anyone else seen this behavior?

[John]

what is the status of the hdd raid?. If the status of raid is degraded try to open a cisco tac for further isolation.

[ashaw216]

RAID was normal and has been each time this has happened.

[Scott H]

Yes, i have had two separate instances of the same issue. Had to unplug the appliance per Cisco each time. I am getting ready to do another upgrade. I am rebooting first...while I am in the office just in case. This info from my TAC case may be helpful.

"Appliance was recovered by unplugging it
We also removed old reporting data and changed update interval to improve performance."

WOW! Before TAC removed old reporting data, my 170 crawled like a snail. It is much faster now. Maybe this will help, don't know. I asked if this was something I could maintenance myself and was told no.

[Handy Putra]

Hi Scott,

Normally what happened is for S170/S160 (1u appliance) that when the upgrade process completed and rebooted, it will try to transfer from upgrade partition to be the boot partition and this process sometime stucked due to smaller disks in 1u appliance.

And by hard reboot (unplug the cable or pressing power off button and wait for 20 seconds then power on again) will force the appliance to transfer across the partition to the boot partition and should fix the issue.

For S170 appliance would recommend to perform below before performing upgrade:

1. Disable the Sensorbase just in case put extra loads in the appliance, to do this:
Go to Web GUI of S170, go to -> Security Services -> SensorBase -> Click on Edit Global Settings button -> untick the Enable SensorBase Network Participation -> Submit and Commit

2. Disable Automatic Updates in the appliance (or change the update interval to be greater such as 12h), in case the automatic updates interrupt the upgrade process, to do this:
Go to Web GUI of S170, go to -> System Administration -> Upgrade and Update Settings -> Click on Edit Update Settings -> Untick "Enable automatic updates" -> Submit and Commit

3. Disable reporting in the appliance in case interrupting the upgrade process (then enable it again once upgrade completed using same command), to do this:
Go to CLI of S170 -> issue "diagnostic" command -> Reporting -> disable -> commit

Regards

Handy