Upgrade from NGAI R55 to NGX R60

[Testing-123]

Hello All,

I have two NGAI R55 firewalls on Nokia IP380's running IPSO 3.9. They are in a VRRP cluster

I am planning on upgrading to NGX R60 with IPSO 4.1.

My plan is to:

- cpstop on secondary
- upgrade IPSO
- Fresh install of R60
- Resic to management station and change the cluster version etc
- Add upgraded NGX licenses

THEN failover primary to secondary and repeat the steps above.

Just wanted your advice/opnion on whether you've had any problems with a similar upgrade? Anything to watch out for?

Cheers
Testing-123

Just wanted advise

[chillyjim]

Make good backups
Remember to upgrade the management station first
Read the upgrade guide

Really think about going with R65 instead of R60

[Testing-123]

Hello chillyjim,

Thanks for the advice, i always make good backups :-)

I prefer to go with products that are mature in my experience. R60 HFA_04 and R62 hasn't given me any issues although i must admit we only use the Firewall-1 features.

I've read the release notes and there doesn't seem to be anything obvious that would worry me but i'm always conscious about the possibility of me missing someting "obvious" which is why i ask the professionals.

Thanks
Testing-123

[cciesec2006]

Testing-123,

Contact me off-line and I can help you with this. I remember writing a
paper on this sometime ago with precise procedure to upgrade from R55
to NGx on Nokia appliances with minimal downtime. When I say "minimal
downtime", I am talking about less than 60 seconds.

[charliey_2000]

I am looking to do the same type of upgrade of our endpoints. We have already done the upgrade from the managment server. We just need to upgade the VRRP HA pairs. How did your upgrade steps work?