SonicOS
Aventail E-Class SRA 10.6.4 Upgrade Guide
Secure Remote Access
Dell SonicWALL Aventail E-Class SRA 10.6.4
Upgrade Guide
This document describes the process of obtaining your Dell SonicWALL Aventail E-Class SRA firmware update file,
verifying it, and installing it on an existing app l iance.
Updating a clustered pair of Aventail E-Class SRA appliances is described at the end of this document. For a
complete list of known issues from previous versions that are fixed in this release, see the Release Notes.
To update the firmware on your Aventail E-Class SRA appliance, you will need to perform the following tasks:
Create a MySonicWALL account, if you don’t already have one. You need an account in order to register your
Aventail E-Class SRA appliance. MySonicWALL registration information is not sold or shared with any other
company.
Register your device on MySonicWALL. Registration provides access to essential resources, such as your
license file, firmware updates, docum entati on, and technical support information. When you register, you are
prompted to enter an authentication code.
Use your MySonicWALL account to retrieve the update file for your Aventa il E-Class SRA appliance.
Upload the update file to your appliance using the Aventail Management Console (AMC) and then reboot.
Obtain your client component update file, install it to all client endpoints, and verify it.
See the following sections for detailed upgrade information:
Platform Compatibility ................................................................................................................................................... 1
Configuration Notes ....................................................................................................................................................... 2
Appliance Upgrade Requirements ................................................................................................................................ 2
Client Upgrade Requirements ....................................................................................................................................... 3
Creating a MySonicWALL Account ............................................................................................................................... 3
Registering Your Dell SonicWALL E-Clas s SRA Ap p l ia nc e ......................................................................................... 3
Finding the Authentication Code f or Your App li anc e .................................................................................................... 4
Obtaining the Update File or Hotfix from MySonicWALL .............................................................................................. 4
Installing an Update or Hotfix Using AMC ..................................................................................................................... 4
Installing the Update or Hotfix File ................................................................................................................................ 5
Verifying the Update ...................................................................................................................................................... 6
Updating a Clustered Pair ............................................................................................................................................. 6
Importing Your Dell SonicWALL EX-Series License ..................................................................................................... 7
Platform Compatibility
Version 10.6.4 of the Aventail E-Class SRA firmware is supported on the following appliances:
EX9000
EX7000
EX6000
Virtual Appliance
P/N 232-002270-00 Rev A
2
Aventail E-Class SRA10.6.4 Upgrade Guide
Upgrade Guide
Configuration Notes
Version
(Appliance) Hotfix
Recommended Hotfixes
10.6.3
Pform-hotfix-10.6.3-342
Clt-hotfix-10.6.3-342
10.6.2
Pform-hotfix-10.6.2-301
Clt-hotfix-10.6.2-320
10.6.1
Pform-hotfix-10.6.1-212
Clt-hotfix-10.6.1-212
10.6.0
Pform-hotfix-10_6_0-002
Clt-hotfix-10.6.0-002
10.5.7
10.0.7
Pform-hotfix-10_0_7-001
Clt-hotfix-10_0_7-001
Symantec OnDemand Protection is not supported in version 10.6.4. Before upgrading to 10.6.4 from 10.0.x,
disable Symantec OnDemand Protection for all End Point Control Zones. Otherwise, the upgrade will fail.
Windows machines running version 10.6.4 clients should be used with SRA EX-Series appliances running one
of the following firmware versions:
o 10.6.4
o 10.6.3
o 10.6.2
o 10.5.7
o 10.0.7
If 10.6.4 clients are used with appliances running 10.5.7/10.0.7 or earlier, zone classification will fail when
connecting, and the user will be put in the default zone.
• In 10.6.4, mysql is replaced by MariaDB.
Appliance Upgrade Requirements
You can upgrade your Aventail E-Class SRA app l ianc e directly to version 10.6.4 from the following vers io ns w hen
the most recent Hotfix has been installed:
• 10.6.3, 10.6.2, 10.6.1
• 10.5.7
• 10.0.7
When upgrading from a major version that is two versions back, appliance firmware upgrades are supported
only from the most recent maintenance release of that major version. If you are upgrading from a 10.0.x
version prior to 10.0.7, you must first upgrade to the most recent 10.0.x maintenance release, which is
version 10.0.7.
It is a best practice that the EX-Series appli anc e be running the latest Hotfix version before upgrading from the
versions listed above. The required Hotfix for each version as of the date of these Release Notes is shown below. It
is possible that additional hotfixes will be released for these versions, in which case you can access the
corresponding Knowledg e Base l ink to see the most up-to-date hotfix recommendations.
Firmware
To check whether any hotfixes have been applied, click System Status or Maintenance from the main navigation
menu in AMC. If any hotfixes have been incorporated, you’ll see a hotfixes link next to the version number. Click
the link for more information about which ones ha ve b een applied.
Appliances running versions 8.8.x, 8.9.x, or 9.0.x must be upgraded to 10.6.1 or to the latest maintenance release
of 10.0.x or 10.5.x before upgrading to 10.6.4. The licensing scheme for the E-Class SRA EX-Series changed in
version 9.0.x. If you are upgrading from version 8.8 or 8.9 to a later version, you must obtain a new license.
Latest Platform
N/A N/A N/A
Latest Client Hotfix Knowledge Base Link to
KB 10423
KB 10216
KB 9955
KB 9664
KB 9364
P/N 232-002270-00 Rev A
3
Aventail E-Class SRA10.6.4 Upgrade Guide
Upgrade Guide
Client Upgrade Requirem e nt s
Client component upgrades follow the same requirements as appliance upgrades.
If hotfixes are up to date on the client, you can upgrade your client components directly to version 10.6.4 from any
of the following versions:
• 10.6.3, 10.6.2, or 10.6.1
• 10.5.7
• 10.0.7
Just as you are advised to install all currently available hotfixes before upgrading the appliance, the associated
client-side fixes need to be installed on all client machines prior to starting the client component upgrade to the next
release. After you apply the platform hotfix to your EX-Series appliance, the client-side fixes are pushed to each
client machine as it connects to the appliance. Depending on your environment, it can take a few days, weeks, or
months before all clients have connected to the appliance and received the client-side fixes.
After you upgrade your EX-Series appliance to 10.6.4, client components are automatically upgraded as client
machines connect to the appliance. Any clients that connect who did not receive the client-side fixes might or might
not be upgraded without problems.
When performing any upgrade that requires stepping through multiple versions, you must allow all client systems to
upgrade to the intermediate version prior to continuing to t h e next versi on. Al l provisioned client components must
be upgraded on all client endpoints before proceeding with the subsequent upgrade. For example, the following
upgrade paths require stepping through intermediate versions:
• 10.5.1 –> 10.5.7 + Hotfixes –> 10.6.4
• 10.0.4 –> 10.0.7 + Hotfixes –> 10.6.4
Backwards compatibility is supported for all 10.6.4 client access agents with the releases eligible for direct upgrade,
listed above. For example, if you upgrade your clients and appliance to version 10.6.4, then notice some type of
issue that requires you to roll the appliance back to 10.5.7 (with hotfixes), the 10.6.4 client access agents will still
activate correctly when the client connects to the 10.5.6 appliance.
Creating a MySonicWALL Account
If you do not already have a MySonicWALL account, create one by completing an online registration:
1. In your Web browser, go to www.mysonicwall.com
2. In the User Login section, follow the link for users who are not yet registered.
3. Enter your account information, personal information, and preferences, and then click Submit. Be sure to use a
valid email address.
4. Follow the prompts to finish creating your account. Dell SonicWALL will send a subscription code to the email
address you entered in step 3.
5. When you return to the login screen, log in with your new username and password.
6. Confirm your account by entering the subscription code you received by email.
.
Registering Your Dell SonicWALL E-Class SRA Appliance
To register your appliance, perform the following steps:
1. In your Web browser, go to www.mysonicwall.com
2. Locate your software serial number, which is printed on the back of your Dell SonicWALL EX-Series appliance.
3. Enter your serial number, and then click Next. Follow the on-screen instructions.
4. Confirm your serial number.
5. Enter a name for this appliance.
and log in with your username and password.
P/N 232-002270-00 Rev A
Loading...