Cluster Auto-Upgrade

[Wintza]

Hi,

I'd like to ask if there is a way to track the last person to upgrade the Cluster firewall. We had an incident yesterday where one of our clients were running on R80.40 (gateways) and R81 (SMS). They logged a P1 and advised that the gateways have been upgraded to R81.10 which is higher than the SMS leading to a huge outage. Is it possible for a gateway to auto-upgrade? Client has Superadmin rights.

[_Val_ · Accepted solution]

No, there are no auto-upgrade capabilities on the GWs. Upgrades have to be explicitly started by someone with admin access. 

You should check the admin logs in /var/log/audit/audit.log and /var/log/messages files to see what really happened there

[Wintza]

Thank you @_Val_ 

[_Val_]

We are here to help

[the_rock]

I agree with @_Val_ . In my 15 years dealing with CP, I had never ever seen a case where cluster would auto-upgrade. The only appliance that I know of where you can configure that is SMB type appliance, to upgrade once new image is available. For regular Gaia, Im pretty positive its not something that would be available.

[Wintza]

Thanks for your input @the_rock

[JozkoMrkvicka]

Each and every upgrade process will create snapshot with version prior to upgraded version. You can simply revert back to previous version by restoring the snapshot which is done before the upgrade (if no installation from ISO was made).