FAQ

Why am I required to upgrade the SGOS version on my ProxySG appliance? What happens if I do not upgrade to one of the recommended versions?

FAQ ID:    FAQ2197
Version:    28.0
Status:    Published
Published date:    06/27/2012
Updated:    08/12/2013
 

Answer

URGENT: SGOS/AVOS Upgrade Required by July 4, 2013

 

Effective February 28, 2013 Blue Coat has removed all non-compliant SGOS/AVOS software versions from the BlueTouch Online (BTO) download site.  This action was taken to ensure our customers upgrade to a compliant software version containing the new Licensing Subsystem.

Blue Coat is upgrading its licensing subsystem. Current ProxySG appliances require a license to enable the appropriate software features for the license edition installed. During the upgrade of the licensing subsystem, Blue Coat will provide a transition phase where any valid licensed edition will continue to function with no change in behavior. However, you must upgrade all your devices to the recommended SGOS version before the end of the transition period, which is July 4, 2013. To reiterate: you must upgrade the SGOS version, not the license file. This upgrade delivers support for the new licensing subsystem and will allow your appliance to function seamlessly beyond the end of the transition period, which ends on July 4, 2013.


***All ProxySG appliances running versions SGOS 3.x and later must upgrade to the recommended minimum version listed in the Technical Field Alert before July 4, 2013.***

Note: If you do not have a valid Blue Coat support contract, you are eligible to upgrade to a version within the same release train only. If the release train is no longer supported, you must upgrade to the SGOS version recommended in the Technical Field Alert.

Failure to upgrade to the recommended SGOS version before July 4, 2013, will render the appliance as unlicensed and non-functional when any of the following events occur:

  • the appliance reboots or restarts
  • you enable or disable the license components during the trial period

For the Proxy Edition license: The appliance stops processing traffic. All requests will be blocked, and an exception page will display to notify users that the appliance is unlicensed.

For the MACH5 Edition license: In an explicit deployment, the appliance stops processing traffic. All requests will be blocked, and an exception page will display to notify users that the appliance is unlicensed. In a virtually inline or physically inline deployment, the appliance will fail to wire and allow all traffic to pass through the appliance. The policy rules configured for your network will no longer be enforced.

Recommendations

Please refer to the Technical Field Alert for a list of versions that support the new licensing subsystem; the alert contains the list of recommended versions referred to below.

  • For most platforms, you should upgrade to the 6.2 or 6.3 version recommended in the Technical Field Alert. The exceptions are as follows:
    • The SG200/210-5 should use the recommended version of 5.5.
    • The SG510 should use the recommended version of 6.2 (if it is currently running 6.x) or the recommended version of 5.5 (if it is currently running 5.x).
  • As a precaution to make sure that you do not accidentally downgrade or boot into an earlier SGOS version that does not include support for the new licensing framework, delete all images that have a build number lower than 88383 from your ProxySG appliance. See "Deleting Older Images" below.
  • If you are upgrading from a 5.x version to SGOS 6, install a compatible older version in the 5.x release train. This allows you the flexibility to roll back to a 5.x release that supports the licensing changes, should you later decide to downgrade. For example, if are currently on SGOS 5.1.1.1, Blue Coat recommends that you upgrade and install the recommended version of SGOS 6.2 or 6.3. However, you should also install the recommended SGOS 5.3.x or higher version with the fix, so that you have an alternative version of 5.x that supports the licensing changes you need.

*Please Note:  All upgrade actions will require that the proxy be restarted in order for them to take effect.

Deleting Older Images

  1. Launch the ProxySG Command Line Interface using SSH.
  2. Enter your access credentials and go into configuration mode.
  3. Enter the following commands to delete the older SGOS images stored on the appliance:

ProxySG #(config) installed-systems

ProxySG #(config installed-systems) view

A list of installed images displays as shown below:

ProxySG Appliance Systems
1. Version: SGOS 6.4.0.1, Release ID: 86791
   Tuesday June 26 2012 14:19:25 UTC,
   Attributes: FIPS capable
   Boot Status: Unknown, Last Successful Boot: Unknown
   Disk Layout: Compatible
2. Version: SGOS 6.2.9.1, Release ID: 83027
   Friday April 20 2012 20:46:18 UTC,
   Attributes: Locked, FIPS capable
   Boot Status: Last boot succeeded, Last Successful Boot: Friday June 15 2012 21:31:40 UTC
   Disk Layout: Compatible
3. Version: N/A, Release ID: N/A ( EMPTY )
   No Timestamp,
   Attributes: None
   Boot Status: Unknown, Last Successful Boot: Unknown
   Disk Layout: Unknown
4. Version: N/A, Release ID: N/A ( EMPTY )
   No Timestamp,
   Attributes: None
   Boot Status: Unknown, Last Successful Boot: Unknown
   Disk Layout: Unknown
5. Version: N/A, Release ID: N/A ( EMPTY )
   No Timestamp,
   Attributes: None
   Boot Status: Unknown, Last Successful Boot: Unknown
   Disk Layout: Unknown

  1. Delete all images that are have a build number lower than XXXXX. Repeat this process until all older build versions are no longer stored on the appliance.

ProxySG #(config installed-systems) delete enter_system_number

For example: ProxySG #(config installed-systems) delete 1

  1. Log out of the appliance.


 

 


Rate this Page

Please take a moment to complete this form to help us better serve you.

Did this document help answer your question?
 
 
If you are finished providing feedback, please click the RATE CONTENT button. Otherwise, please add more detail in the following text box and then click RATE CONTENT.
 
 

Your response will be used to improve our document content.

Ask a Question