How to Upgrade Edge SWG (ProxySG) or Content Analysis running on the Integrated Secure Gateway

Products

ISG Content Analysis ISG Proxy ProxySG Software - SGOS Content Analysis Software

Issue/Introduction

With the introduction of the SSP hardware platform, the Edge SWG and Content Analysis (CAS) appliances no longer run directly on hardware but are virtual machines hosted on the Integrated Secure Gateway (ISG) hypervisor. As a result of this change, the upgrade process has changed slightly from previous versions of Edge SWG and Content Analysis.

Now the Edge SWG and CAS are considered "applications" of the ISG hypervisor and system images are controlled by the hypervisor.

Environment

Running Edge SWG or CAS on the SSP hardware platform

Resolution

Upgrading consists of 4 basic steps:

Adding the new image
Stopping the application (i.e. Edge SWG or CAS)
Editing the application (associating the new OS version to the application)
Restarting the application

These instructions assume you have access to the Broadcom support portal during the upgrade or you already have downloaded the OS image.

You can upgrade the application OS either from the ISG Admin Console GUI within Management Center or from the ISG command line.

Upgrading the OS from Management Center

Note: If you do not have Management Center then you will have to use the Command Line method below.

1) Adding the new image

Launch the ISG Admin Console

From the Management Center GUI, select Network from the left-hand pane.
Find the ISG device the Edge SWG is loaded on, and select it. Then, from the Operations drop-down, select Launch Console.

On the popup that appears, choose the console package and select Configure. The ISG Admin Console should now load.

Add the System Image

From the ISG Admin Console, Navigate to Configuration > Application System Image Catalog. The existing system images are displayed.

Select Add Image

On the popup, there are two options. By selecting Available Images, you can log into the Support Portal and choose the image. Alternatively, you can enter the URL of a hosted image and click Add. The image now shows in the catalog.

2) Stop the application

Note: do this during non-production hours

From the ISG Admin Console, navigate to Configuration > Applications. Stop the desired application (Edge SWG / Content Analysis) by selecting the square icon found to the right of the desired application.

A popup will appear asking for confirmation. Confirm by selecting Stop.

3) Edit the application (i.e., edit the OS image associated with the application)

Once offline, select the no longer greyed-out pen and pad icon to edit the application.

Under Type, find the drop-down menu next to System Image, and choose the image you wish to upgrade to.

Once selected, click Save on the right side of the screen.
A popup will ask you to confirm the choice. Confirm by selecting Save Changes. Once saved, another popup will inform that the changes were successful.

4) Restart the application

Start the application again by selecting the triangle Start icon to the right of the application.

Once started, the upgrade is complete.

Upgrading from the Command Line

1) Adding the new image

From ISG CLI:

> enable
# configure
(config)# images
(config-images)# load image_url

Once loaded, the image should appear with the rest of the system images. Images can be shown from.

#(config-images) view

2) Stop the application

Note: do this during non-production hours

Exit the config-images menu then enter the config-applications menu:

(config-images)# exit
(config)# applications

Stop the application.


(config-applications)# stop application_name

You can view available applications with

(config-applications)# view

3) Edit the application (i.e., edit the OS image associated with the application)

Edit the application with

(config-applications)# edit application_name image-id image-id

Where "application_name" is the application name you want to upgrade and "image-id" is the new OS

you wish to upgrade to.

4) Restart the application

Start the application with

(config-applications)# start application_name

Once started, the upgrade is complete.

Additional Information

More information on managing applications can be found in the ISG online documentation under the Manage Applications section and the managing images section Manage Images.