Upgrading 17.5.15 to 18.05 MR5

Question

Hi there, 
 We are due to upgrade our current XG210's (in HA) to v18 MR-5 and to be honest, I'm really not looking forward to it. 
 I never seem to fear upgrading our Sonicwall firmware, which is always flawless, but Sophos makes me have sleepless nights. I will be replacing them with Sonicwalls by end of the year, but for now, we need to upgrade to v18 for compliance reasons to stay up to date and supported. We only use the firewalls for hosting through WAF and IPSEC VPN for site-to-site connection to our main office. What pitfalls should I look out for? Any tips or pointers? Do I need to disable HA first or can I just run the upgrade? I will be on-site in our data centre to do the upgrade as I nearly bricked the secondary during the last upgrade and ended up having to recover it. 
 Thanks! Ed

LuCar Toni · Answer

I would recommend to reboot first both appliances, simply to check, if both will come up again after a reboot. 
 The upgrade process will reboot both simultaneously. So you have to expect a downtime. 
 
 WAF will have a upload limit of 1 MB after the upgrade. Can be upgraded by Sophos Support, if you need more then 1 MB. 
 V18 will introduce the fast path technology into your setup. If something act "wild", try to disable the fastpath to check, if this help: console> system firewall-acceleration disable 
 Configuration should be migrated without any changes. 
 Check first the known issue list: https://docs.sophos.com/releasenotes/index.html?productGroupID=nsg&productID=xg&versionID=18.0

Upgrading 17.5.15 to 18.05 MR5

Top Replies