Quantum 9100 to S600 - Version and Update Order Inquiry

[IGSSV]

Hi everyone,

I hope you're doing well. I recently purchased a Quantum 9100 and am planning to add it under the management of an existing S600. I have a question regarding version compatibility and update order, and I’d appreciate your advice.

Currently, the Gaia OS versions are as follows:

Quantum: 81.20 Take 791
S600 (SMS): 81.20 Take 634

The patch version on the SMS is slightly older than the Quantum. Due to certain constraints, I cannot immediately update the SMS.

Would it be acceptable to add the Quantum 9100 under the SMS's management in this state, or would it cause any issues?

When updating both the SMS and SG to the latest patch (currently Take 92), is there a recommended order? I plan to proceed with SMS first, followed by SG, unless advised otherwise.

Thank you in advance for your time and guidance. Any insights or recommendations would be greatly appreciated!

Best regards,

[Chris_Atkinson]

Is the management at least Jumbo/JHF T54 or higher?

Otherwise don't foresee an issue here, sometimes new hardware needs a specific build image that won't apply to other units.

For major version upgrades the Management should be done first.

For incremental jumbo/JHF patching it's less critical.

[the_rock]

As @Chris_Atkinson , there should not be any issues. Yes, its recommended to have all "entities" if you will on the same jumbo fix, but honestly, I had seen customers run way lower jumbo jotfix on mgmt server than gateways and its never a problem, as long as version is the same.

ie -> management R81.20 jumbo 10

gateways can be R81.20 jumbo 96 (latest one) and it will work just fine. All you need to remember is that management has to be same OR higher version than the gateways it manages, thats it.

Hope that helps.

Andy

[Chillyjim]

In my not-so-humble opinion, this is one of the "Just because you can do it doesn't mean that you should."
@the_rock is correct; up until a new gateway feature is added, then I see it break.

Is there a reason not to patch the manager?

[the_rock]

In my honest opnion, Im fairly confident all would work, as I had tested this in the lab many times and no issues, but again, it is best practise after all, to keep everything on the same "level", if you will.

Andy

[Chris_Atkinson]

As above the minimum requirements in this case for MGMT is JHF Take 54 (not to be confused with the major version image Take for those that might not be familiar with the difference)

PRJ-52942,PRJ-52484

Security Gateway

NEW: This Jumbo Hotfix Take introduces support for new Quantum Force appliances 19100 / 9800 / 9700 / 9400 / 9300 / 9200 / 9100 appliances. Refer to sk181698 and to sk180520.

Requires installing SmartConsole R81.20 Build 653 or higher.

[the_rock]

Thanks Chris!

[IGSSV · Accepted solution]

Hi everyone,

Thank you so much for your detailed and insightful responses, especially to @Chris_Atkinson, @the_rock, and @Chillyjim. Your guidance has been incredibly helpful in clarifying my concerns.

Based on your feedback:

• I’ll confirm that the management server (SMS) is at least on JHF Take 54 or higher.
• I understand that while it's technically possible to add the Quantum 9100 under the current SMS setup, it’s always best practice to keep all devices on the same Jumbo Hotfix level.
• I’ll prioritize updating the SMS first, followed by the gateways, and ensure compatibility throughout the process.

Your advice has given me the confidence to proceed while minimizing risks. I truly appreciate the time and expertise you all have shared.

Best regards,
IGSSV

[the_rock · Accepted solution]

Glad we can help @IGSSV . Personally, I would go with jumbo 92, since thats the recommended one currently. I did install jumbo 96 in the lab and seems really good so far, but to be on a safe side, specially in production, better always go with recommended.

Best,

Andy