Upgrade or Downgrade ProxySG or Advanced Secure Gateway using the Command Line Interface

Products

• Advanced Secure Gateway Software - ASG
• ProxySG Software - SGOS

Issue/Introduction

Learn how to upgrade or downgrade the Symantec ProxySG or Symantec Advanced Secure Gateway (ASG) using the Command Line Interface (CLI) through Secure Shell (SSh) or serial console.

For instructions for upgrading through the Graphical User Interface (GUI), please see Upgrade ProxySG or Advanced Secure Gateway via the GUI.

 

Environment

ProxySG or ASG requirements for CLI upgrade:

• Have the correct SGOS image hosted on a server that is accessible from the ProxySG or ASG, or link location from the support site download page
• Have a recent backup of all private data. See Backup or copy the ProxySG configuration via the CLI (SSH) (recommended to get private data shown in config)
• Follow the correct upgrade/downgrade path. See ProxySG/Advanced Secure Gateway OS Upgrade/Downgrade Requirements and Resources
• Make sure regarding upgrading or downgrading to the recommended release for the appropriate branch. See What ProxySG/Advanced Secure Gateway OS is recommended and release is the most stable

Resolution

Connect to the command line (with SSh or a serial console) and run these commands:

# en
# conf t
# (config) upgrade-path "http://xxx.xxx.xxx.xxx/path/to/file.bcsi"
# (config) exit
# load upgrade
# restart upgrade

Notes:

• Quotes around the URL are only needed when special characters are in the URL like "?"
• xxx.xxx.xxx.xxx is the IP address of the server where the file is hosted.
• /path/to/file.bcsi is the path and filename of the image

The use of HTTPS for the download URL will require ProxySG or ASG to know the certificate of that server. Specify the IP or URL that would be appropriate for the CN of the Certificate used. If the certificate has the IP address as the CN, then the URL must contain the IP address, or, if the certificate has the hostname as CN, then specify the hostname in the URL. For HTTP this does not matter. ProxySG and ASG already have the appropriate Certificates to Validate the URL link for the Symantec site.

Load the OS to the ProxySG or ASG using the HTTPS URL from the Broadcom Support Portal

• Log in to the Broadcom Support Portal and go to the Product Downloads section.

• If there are a lot of products listed, narrow down by hardware type. In this example, an SG-S500-20 is used.

• Choose the release version from the drop down menu next to the model desired, and click the link on the model number.

• On the following screen, find the .bsci file, and click the "Generate" link on the right hand side

• The download link will now appear. Select the text of the download link and copy it.

• Use this URL as the upgrade-path in the commands given at the beginning of the article.