Cloudguard Azure VMSS version management

[dehaasm]

In Azure we have a VMSS scaleset with existing version R81.10 and take, what would be the best method to upgrade the firewalls and also to assure that the CME/SMS templates use the new image version for redeployment or scaleout events?

Can we upgrade the firewall normally via CPUSE and do we need to upgrade the CME config somewhere to update to the new image version?

[natanelm]

Hi @dehaasm,

According to virtual-machine-scale-sets-upgrade-scale-set, some of the VMSS properties can only be set when you create the scale set, these properties include the Image reference offer, meaning that for scale-out events (new instances) you will get the old version, therefore, upgrading using CPUSE is not supported and not recommended.

Please follow Upgrading_the_CloudGuard_VMSS_Solution admin guide for this procedure.

Thanks,
Natanel

[dehaasm]

Hi Natanel,

ok thanks good to know, is it also possible to automatically allow a bigger log directory or do you still need to replace the GRUB file to bootup in maintenance mode, increase disk size each time after you upgrade / deploy new VMSS? What about a Smartevent server Azure template is that coming soon?

[HeikoAnkenbrand]

Here in the manual you will find information on how to perform the upgrade:

Upgrading the CloudGuard VMSS Solution 

[dehaasm]

Hi Thanks ok got it, do you have any advise on how to include smartevents in Azure please?