Update Firmware

Hi Samuel,

The backup is forward compatible, so if it was taken on the older version, yes you can revert and upload it but I don't see why this is necessary?

When you revert the firmware, it brings the system back to the configuration state it was at the time of upgrade.

Thanks for the answer, this is because if i have a problem with the Update i can revert to the stable version, i have another question, i dont understand which i have to select because i have two Version in my firewall, i attachment the image, or i have to update both of them?

Hi Samuel,

The two top are the active and previous version which you can revert to.

The two bottom ones are the latest firmware and the latest maintenance release on the major version that you are currently on.

You can go to either one, both will work. 

The recommended version is the HW-17.5.5_MR-5.SF300-433? is the latest version? better than HW-SFOS_16.05.9_MR-9.SF300-331?

Yes, 17.5 MR-5 is the current latest firmware version. 

https://community.sophos.com/kb/en-us/121502

Version 16.x.x will be end of life on August 20th 2019. 

Thanks, you helped me a lot.

Be aware of this:

A backup will restore only and only on the XG firmware version it was done with.  Firmware 17.5.5 will not restore from a backup file generated with 17.5.0 And even so, if you upgraded patterns, it may not upgrade as well.

So every time you upgrade firmware or pattern, you need a new LOCAL backup in case you need to restore it.  Write down the firmware version along the date in your backup file name.

Backup by mail have given me unusable backup files.  Always at a pretty bad moment.  So be paranoid and backup both locally and by email.  Local backup file can be downloaded from the firewall via a WEB browser.

Nobody wants to run anything under version v16.x.x A pile of bugs and problems.

Good Luck

Paul Jr

Be aware of this:

A backup will restore only and only on the XG firmware version it was done with.  Firmware 17.5.5 will not restore from a backup file generated with 17.5.0 And even so, if you upgraded patterns, it may not upgrade as well.

So every time you upgrade firmware or pattern, you need a new LOCAL backup in case you need to restore it.  Write down the firmware version along the date in your backup file name.

Backup by mail have given me unusable backup files.  Always at a pretty bad moment.  So be paranoid and backup both locally and by email.  Local backup file can be downloaded from the firewall via a WEB browser.

Nobody wants to run anything under version v16.x.x A pile of bugs and problems.

Good Luck

Paul Jr

When i'll update my firewall, the configuration it's gonna be erased? so i have to do everything from the beginnig? and if i have any problem with the update, i can't fix with my backup ?

Hello.  I'm not sure what will happen what upgrading from SFOS 16.05.4 MR4 (since your active configuration is 16.05.4) to SFOS 17.5.5 MR5 will do.  In THEORY, I believe yes.

But no matter what:

1. First, on the same page, select "Pattern Updates" tab, and update patterns.  Completely on the right of the page.  Wait 5 to 10 minutes until it's completed.
2. Then, on the same page, select "Backup & Restore" tab and do a local backup.  Download it on your desktop.

It's then I'm not sure. Would I upgrade to SFOS 16.05.9 MR9, repeat steps 1 and 2, THEN upgrade to SFOS 17.5.5 MR5 and repeat steps 1 & 2 again ?

or ...

Upgrade directly to SFOS 17.5.5 MR5 and repeat steps 1 & 2 once ?

In theory, you can upgrade directly to SFOS 17.5.5 MR5, since it is suggested to you, on XG's web page.  Configuration should be kept.  But.  With Sophos, you never know if you'll catch a rabbit with a grenade ...

Paul Jr

So ? Any feed back ?

Paul Jr

Hi,

thanks for the helps, i did the update and everything is working good, i did this step by step and work for me,

thanks :)

MR6 released ...

https://community.sophos.com/products/xg-firewall/b/xg-blog/posts/sfos-17-5-mr6-released

There's an AP update to 11.0.0.008 too.  Do not forget it.

Paul Jr