Sonicwall AVENTAIL 10.5.1 Upgrade Guide

Secure Remote Access

This document describes the process of installing a platform update on a SonicWALL Aventail E-Class SRA appliance. The procedure is summarized here and described in more detail below:

SonicWALL Aventail E-Class SRA EX-Series 10.5.1

rade Guide

 Create a MySonicWALL (www.mysonicwall.com) account, if you don’t already have one. You need an account

in order to register your SonicWALL Aventail SSL VPN. Note: MySonicWALL registration information is not sold or shared with any other company.

 Register your device on MySonicWALL. Registration provides access to essential resources, such as your

license file, firmware updates, documentation, and technical support information.

 When you register, you are prompted to enter an authentication code.  Obtain your update file, install it, and verify it.

Updating a clustered pair of SonicWALL Aventail appliances is described at the end of this document. For a complete list of known issues from previous versions that are fixed in this release, see the Release Notes.

See the following sections for detailed upgrade information:

Platform Compatibility................................................................................................................................................1

Upgrade Requirements..............................................................................................................................................2

Configuration Notes...................................................................................................................................................2

Creating a MySonicWALL Account ...........................................................................................................................3

Registering Your SonicWALL Aventail E-Class SRA Appliance...............................................................................3

Finding the Authentication Code for Your Appliance.................................................................................................3

Obtaining the Update File from MySonicWALL.........................................................................................................4

Installing the Update..................................................................................................................................................4

Verifying the Update..................................................................................................................................................5

Updating a Clustered Pair..........................................................................................................................................6

Importing Your SonicWALL Aventail License............................................................................................................7

Platform Compatibility

Version 10.5.1 of the SonicWALL Aventail E-Class SRA EX-Series is supported on the following appliances:

 SonicWALL Aventail E-Class SRA EX7000  SonicWALL Aventail E-Class SRA EX6000  SonicWALL Aventail E-Class SRA EX-2500  SonicWALL Aventail E-Class SRA EX-1600  SonicWALL Aventail E-Class SRA EX-750

SonicWALL Aventail E-Class SRA EX-Series 10.5.1 Release

232-001895-00 Rev A

Upgrade Guide

Upgrade Requirements

The EX-Series appliance must be running the latest Hotfix version before upgrading from 9.0.0, 9.0.1, or 9.0.2 to

10.5.1. The required Hotfix for each version (9.0.x) is clt-hotfix-9_0_x-013. Appliances running versions 8.8.x or 8.9.x must be upgraded to the latest maintenance release of 9.0.x or 10.0.x

before installing 10.5.1.

To verify the current version and hotfixes:

• From the main navigation menu in AMC, click System Status. In addition to the version number, the System Status and Maintenance pages display a list of any hotfixes that have been applied.

To install a hotfix:

To apply a hotfix, run the following steps, replacing the examples with the actual file name for the hotfix:

1. Log in to your MySonicWALL account and select Support > Knowledge Portal in the left navigation pane.

2. Locate the hotfix script file, in the format clt-hotfix-9_0_x-0xx.gz, and copy it to the root folde r (/) on the

appliance.

3. Log in to the appliance, or to the master node of a pair, via SSH or serial connection as root.

4. Change directory to the root folder (/) with the command: cd /

5. Decompress the archive with the command: gzip -d clt-hotfix-9_0_x-0xx.gz

6. Mark the hotfix script as executable with the command: chmod a+x clt-hotfix-9_0_x-0xx

7. Execute the hotfix script: ./clt-hotfix-9_0_4-002 –i

8. Reboot the appliance.

9. Repeat steps 1-7 on slave node (if applicable).

The hotfix script will perform certain actions such as the following:

• Backs up existing files.

• Replaces files with updated ones containing the fix.

• Restarts snmp and servicemgr services.

To restore to the previous state:

If you wish to restore the appliance to the state it was in before applying the hotfix, run the following steps, replacing the examples with the actual file name for the hotfix:

1. Log in to the appliance, or to the master node of a pair, via SSH or serial connection as root.

2. Change directory with the command: cd /var/lib/aventail/avp/rollback

3. Uncompress the rollback script with the command: gzip -d clt-hotfix-9_0_x-0xx.0.0.gz

4. Run the rollback script with the command: ./clt-hotfix-9_0_x-0xx-rollback1.0.0 –i

5. Reboot the appliance.

6. Repeat steps 1-5 on slave node (if applicable).

A note about licensing requirements:

 The licensing scheme for the E-Class SRA EX-Series changed in versio n 9.0.x. If you are upgrading from

version 8.8 or 8.9 to a later version, you must obtain a new license.

Configuration Notes

 The OPSWAT Secure Desktop Emulator is currently provided as an early release and has a number of known

issues. See the SonicWALL Aventail 10.5.1 Release Notes for details.

 Symantec OnDemand Protection is not supported in version 10.5.1. Before upgrading to 10.5.1 from 10.0.x and

earlier versions, disable Symantec OnDemand Protection for all End Point Control Zones. Otherwise, the upgrade will fail.

SonicWALL Aventail E-Class SRA EX-Series 10.5.1 Release

232-001895-00 Rev A

Upgrade Guide

Creating a MySonicWALL Account

If you don’t already have a MySonicWALL account, create one by completing an online registration:

1. In your Web browser, go to

2. In the User Login section, follow the link for users who are not yet registered.

3. Enter your account information, personal information, and preferences, and then click Submit. Be sure to use a valid email address.

4. Follow the prompts to finish creating your account. SonicWALL will send a subscription code to the email address you entered in step 3.

5. When you return to the login screen, log in with your new username and password.

6. Confirm your account by entering the subscription code you received by email.

www.mysonicwall.com.

Registering Your SonicWALL Aventail E-Class SRA Appliance

To register your appliance, perform the following steps:

1. In your Web browser, go to www.mysonicwall.com and log in with your username and password.

2. Locate your software serial number, which is printed on the back of your SonicWALL Aventail appliance.

3. Enter your serial number, and then click Next. Follow the on-screen instruction s.

4. Confirm your serial number.

5. Enter a name for this appliance.

6. If you are upgrading to version 10.5.1 from 8.8 or 8.9, you must also enter an authentication code (how to find the code is described in the next section).

7. Click Register to continue.

8. Follow the online prompts to fill out the survey and complete the registration process.

Finding the Authentication Code for Your Appliance

Your authentication code is the hardware identifier for your appliance, and it is displayed in one or two places, depending on your appliance model:

 EX7000 and EX6000: Both your serial number and authentication code are printed on your appliance label;

they are also displayed on the General Settings page in AMC. Skip to the next section.

 EX-2500, EX-1600, and EX-750: Your authentication code is the same as the MAC address of the internal

(eth0) network port. If you know how to obtain the MAC address for eth0, you can supply it to the mySonicWALL.com Web site and proceed to get your license before upgrading the appliance software.

If you are not comfortable doing this, the simplest way to find the code is to first upgrade your appliance to version 10.5.1, and then copy and paste it from AMC.

To get the authentication code/MAC address of your appliance, perform the following steps:

1. Install the 10.5.1 upgrade (see the steps in the next section, “Obtaining the Update File from

mySonicWALL.com”).

2. Click General Settings in the main navigation menu in AMC. On an appliance running 10.5.1, the

authentication code is shown in the Licensing area of that page: copy this code.

3. Log back in to mySonicWALL.com to retrieve your license file: select your appliance, and then paste its

authentication code into the corresponding text box.

SonicWALL Aventail E-Class SRA EX-Series 10.5.1 Release

232-001895-00 Rev A

+ 4 hidden pages