topic Re: Cluster Auto-Upgrade in Firewall and Security Management

Cluster Auto-Upgrade

Wintza — Wed, 31 Aug 2022 09:42:03 GMT

Hi,

I'd like to ask if there is a way to track the last person to upgrade the Cluster firewall. We had an incident yesterday where one of our clients were running on R80.40 (gateways) and R81 (SMS). They logged a P1 and advised that the gateways have been upgraded to R81.10 which is higher than the SMS leading to a huge outage. Is it possible for a gateway to auto-upgrade? Client has Superadmin rights.

Re: Cluster Auto-Upgrade

_Val_ — Wed, 31 Aug 2022 11:41:29 GMT

No, there are no auto-upgrade capabilities on the GWs. Upgrades have to be explicitly started by someone with admin access.

You should check the admin logs in /var/log/audit/audit.log and /var/log/messages files to see what really happened there

Re: Cluster Auto-Upgrade

the_rock — Wed, 31 Aug 2022 11:59:22 GMT

I agree with @_Val_ . In my 15 years dealing with CP, I had never ever seen a case where cluster would auto-upgrade. The only appliance that I know of where you can configure that is SMB type appliance, to upgrade once new image is available. For regular Gaia, Im pretty positive its not something that would be available.

Re: Cluster Auto-Upgrade

Wintza — Wed, 31 Aug 2022 12:14:44 GMT

Thank you @_Val_

Re: Cluster Auto-Upgrade

Wintza — Wed, 31 Aug 2022 12:24:11 GMT

Thanks for your input @the_rock

Re: Cluster Auto-Upgrade

_Val_ — Wed, 31 Aug 2022 13:00:42 GMT

We are here to help

Re: Cluster Auto-Upgrade

JozkoMrkvicka — Wed, 31 Aug 2022 17:52:58 GMT

Each and every upgrade process will create snapshot with version prior to upgraded version. You can simply revert back to previous version by restoring the snapshot which is done before the upgrade (if no installation from ISO was made).