Upgrade or Downgrade ProxySG or Advanced Secure Gateway using the Command Line Interface


Article ID: 169271


Updated On:


Advanced Secure Gateway Software - ASG ProxySG Software - SGOS


Learn how to upgrade or downgrade the Symantec ProxySG or Symantec Advanced Secure Gateway (ASG) using the Command Line Interface (CLI) through Secure Shell (SSh) or serial console.

For instructions for upgrading through the Graphical User Interface (GUI), please see Upgrade ProxySG or Advanced Secure Gateway via the GUI.



ProxySG or ASG requirements for CLI upgrade:


Connect to the command line (with SSh or a serial console) and run these commands:

# en
# conf t
# (config) upgrade-path "http://xxx.xxx.xxx.xxx/path/to/file.bcsi"
# (config) exit
# load upgrade
# restart upgrade


  • Quotes around the URL are only needed when special characters are in the URL like "?"
  • xxx.xxx.xxx.xxx is the IP address of the server where the file is hosted.
  • /path/to/file.bcsi is the path and filename of the image

The use of HTTPS for the download URL will require ProxySG or ASG to know the certificate of that server. Specify the IP or URL that would be appropriate for the CN of the Certificate used. If the certificate has the IP address as the CN, then the URL must contain the IP address, or, if the certificate has the hostname as CN, then specify the hostname in the URL. For HTTP this does not matter. ProxySG and ASG already have the appropriate Certificates to Validate the URL link for the Symantec site.

Load the OS to the ProxySG or ASG using the HTTPS URL from the Broadcom Support Portal

  • If there are a lot of products listed, narrow down by hardware type. In this example, an SG-S500-20 is used.

  • Choose the release version from the drop down menu next to the model desired, and click the link on the model number.

  • On the following screen, find the .bsci file, and click the "Generate" link on the right hand side

  • The download link will now appear. Select the text of the download link and copy it.

  • Use this URL as the upgrade-path in the commands given at the beginning of the article.