topic INSTALL JHF 130 ON VSX in Firewall and Security Management

INSTALL JHF 130 ON VSX

aMatthew — Fri, 22 Mar 2024 07:11:51 GMT

Hi all,

I would need your support .
I need to do the installation of JHF take 130 on our firewalls.

The infrastructure consists of a physical cluster (with two members FW1 and FW2). 3 VSXs are connected to it.

Should the update be done only on the physical nodes (FW1 and FW2)?
Do the VSXs inherit the configuration from the physical firewall ?

Thanks

Re: INSTALL JHF 130 ON VSX

RamGuy239 — Fri, 22 Mar 2024 09:21:51 GMT

On VSX, everything is handled by VS0. All virtual systems will be the same as VS0. When patching and/or upgrading, you only need to do it on VS0, which in this case will be what you refer to as "FW1" and "FW2".

When moving between major versions, aka going from R81.10 to R81.20, you will need to upgrade VS0 but also run vsx_util upgrade using SSH on the management server to change the VSX configuration on the management server from R81.10 to R81.20.

This is not applicable in this scenario where you are only talking about moving between minor versions / JHF.

Re: INSTALL JHF 130 ON VSX

Alex- — Fri, 22 Mar 2024 10:33:49 GMT

Be aware that Take 130 still doesn't contain the fix for the cxld issue which appeared in Take 113 and is relevant to VSX platforms.

It's fixed in Take 132 but Take 139 is still ongoing. If you go for Take 130, you should follow the SK about cxld manually.

For the moment, we limit our VSX to Take 110 until Take 139 or above becomes GA.

Make sure to read sk181891.