This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Upgrading XG Firewall fron v. 17.5.10 to 18

Hi,

I have just finished to try to upgrade my Sophos XG home firewall (I use it for personal use for training and experiments before delivery updates to my customers) from the version 17.5.10 MR-10 to the 18 version. The new firmware was installed regularly and it started perfectly, but it has lost completely the previous configuration and it started with the default factory configuration (it lost rules, user, all...)

What were wrong?

Is there a list of pre-requisite to check (or to know)?

Many thanks in advance.

P.S.: the new firmware has been download fron the official Sophos site, on My Sophos ID portal, specifying the model/serial number

This thread was automatically locked due to age.

Parents

0 LuCar Toni over 5 years ago

You need to verify the upgrade path.

Which step did you take?

MR11 does not have a update path right now. https://community.sophos.com/products/xg-firewall/b/blog/posts/sfos-17-5-mr11-released

MR10 to MR6 should be using Build 354. https://community.sophos.com/products/xg-firewall/b/blog/posts/xg-firewall-v18-ga_2d00_build354-is-now-available
Cancel
Vote Up 0 Vote Down

Cancel
0 Giorgio Premoli1 over 5 years ago in reply to LuCar Toni

Hi LuCar!

I downloaded from the Sophos site the appropriate firmware (SW-18.0.0_GA-Build 354.SFW-354.sig), I logged in on my firewall console (GUI) -> Buckup and Firmware -> Firmware and, clicking on the UP ARROW (Upload firmware), I uploaded and booted the new firmware using GUI; it validated the image, loaded the new firmware, applied it and rebooted.
I'm sube to have not use the boot with factory default configuration option.

After rebooting I found it at the "factory default" IP address 172.16.16.16 with the default configuration (but not the initial setup); all settings were lost.

So, entering on the "new console" I re-activated the old image (17.5.10) (via GUI) and I got the previous version with all right settings working

What can I check/modify?

Many many thanks

Giorgio
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Giorgio Premoli1 over 5 years ago in reply to LuCar Toni

Hi LuCar!

I downloaded from the Sophos site the appropriate firmware (SW-18.0.0_GA-Build 354.SFW-354.sig), I logged in on my firewall console (GUI) -> Buckup and Firmware -> Firmware and, clicking on the UP ARROW (Upload firmware), I uploaded and booted the new firmware using GUI; it validated the image, loaded the new firmware, applied it and rebooted.
I'm sube to have not use the boot with factory default configuration option.

After rebooting I found it at the "factory default" IP address 172.16.16.16 with the default configuration (but not the initial setup); all settings were lost.

So, entering on the "new console" I re-activated the old image (17.5.10) (via GUI) and I got the previous version with all right settings working

What can I check/modify?

Many many thanks

Giorgio
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Håkan B over 5 years ago in reply to Giorgio Premoli1

Hi

As of today, April 22, this is still the same error going from SFOS 17.5.11 MR-11 to SFOS 18.0.0 GA-Build354:
Causes firewall to boot in factory reset mode.

This is on a XG115w firewall.

Any solutions to this?

Best regards!

/Håkan
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Håkan B

Hi,

v18-354 does not have an upgrade function for mr-11 only v18 MR-1 does.

MR-1 has been withdrawn while a bug is fixed.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Vasilis Soumekas over 5 years ago in reply to rfcat_vk

I have a quick question : Can from SFOS 17.5.11 MR-11 go to HW-18.0.0_GA-Build354.SF300-354 without loose any of my settings ?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Vasilis Soumekas

Hi,

you can do a backup of v17.5.11 and then upgrade to v18.0.0 354 and then do a restore. The automatic upgrade function will fail.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Vasilis Soumekas over 5 years ago in reply to rfcat_vk

Hello Ian !

Thank you for your response !

I need to upgrade from v17 to v18.0.0.354.

But i read that if i do will go to factory defaults . This is big problem for me.

For now the only thing i did is to upload the firmware to the firewall and nothing else.

Any guides for safe upgrade? A link maybe ?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Vasilis Soumekas

Hi Vasilis,

do you still have mr-10 on your firewall? If you do you can roll back and then install the 354 upgrade file. If not then you really can't use v18 until mr-1 or its replacement are released.

If you have an MR-10 backup you could install v18 354 and then restore the backup. MR-11 has fixes in it, so I would be very careful in upgrading to v18 354 it does not have the fixes to the VPN issues.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Vasilis Soumekas over 5 years ago in reply to rfcat_vk

Hi Ian

At this moment install and active is SFOS 17.5.11 MR-11

And BckUp is : SFOS 17.5.10 MR-10.

So if i understand correct u suggest roll back to 10 and then install v18.354 ?

If i do this i will not loose any setting ?
Cancel
Vote Up 0 Vote Down

Cancel