The Firmware Update page lets you manage software updates on CC-managed CloudGen Firewalls. Managing remote software updates is very similar to remote execution. For more information, see CC Remote Execution Page. To access the Firmware Update page on Control Center, click the CONTROL tab and select the Firmware Update icon in the service bar.
The Firmware Update page provides four separate sections:
- System List
- Download Portal
- Files on Control Center
- Product Tips
In the System List, the top section of the page, administrative entities are arranged in views corresponding to the structure of the Control Center configuration tree. Each entry includes detailed information about every system the Control Center administers. An administrator sees only ranges, clusters, and boxes of their scope. The information is arranged in the following columns:
- Box – The name of the CC-administered firewall.
- Version – The software version installed on the firewall.
- Hotfixes – Displays the hotfixes installed on the firewall, if applicable.
- IP – Displays the management IP address of the firewall.
- Unit Description – Description of the firewall, if applicable.
- Primary Server – The first virtual server on the firewall.
- Secondary Server – The second virtual server on the firewall.
- Last Status – Shows the time that has passed since the CC fetched status information from a firewall. CloudGen Firewalls actively propagate status information to the Firewall Control Center.
- File Transfer Status – Displays the status of file transfers during the update process.
- Transfer Time – Displays the time of file transfers during the update process.
- Transfer Info – Displays additional information regarding the update.
Filtering options on top of the list help you recognize systems with identical software versions. Based on the filter selection, firewalls can then be selected and scheduled for update simultaneously. To display the filtering options on top of the section, select the Show Filter icon. The filtering section provides a field for each column. The following selections are available:
- General – These options are part of most filters:
- Clear Filter – Removes the filter selection for this column.
- Text Filter – Filters for text entries.
- Not Empty – Shows all empty fields in the column.
- Empty – Shows all fields that contain at least one entry.
- Hotfixes – Filters for hotfixes, providing the following options:
- Hotfixes Installed – Displays all installed hotfixes.
- Hotfixes Not Installed – Displays the hotfixes that are uploaded, but not yet installed on the box.
- LastStatus – Filters for the time that has passed:
- Success – Since the CC successfully fetched status information from a firewall.
- Fail – Since fetching status information failed.
- No Status – Since status information was fetched, with no regards to success or failure.
- File Transfer Status – Filters for file transfers as follows:
- Completed Transfer – Shows all firewalls for which the update has finished.
- Failed Transfer – Shows all firewalls for which the file transfer has failed.
- Transfer in Progress – Shows all firewalls for which the file transfer is in progress.
- Any Transfer – Shows all firewalls for which any transfer is in progress.
- No Transfer – Shows all firewalls for which no file transfer is scheduled or in progress.
The Groups tool allows you to define administrative groups of firewalls in order to facilitate installation of updates on firewalls with similar configurations. To create, edit, and manage groups, click Edit Groups in the service bar on top of the page.
The group view offers a range of service bar icons that allow administrators to group system list entries.
To create a group:
- Click New Group. This adds an entry on top of the system view list. You can also right-click any item in the system list and select New Group.
- Click the pen icon next to the entry and define a name for the group. The characters "
" and "|" are not allowed for group names. These characters will be replaced by an underscore "_".
- To assign a firewall to the group, click a firewall and drag it to the group it should be assigned to.
- Click Save Changes in the action bar.
To delete a group, right-click the group and select Remove Group. All entries in the group are then moved back to the default group. Use the Save/Discard Changes options to save or discard your configuration.
The group view offers the following additional service bar icons that allow administrators to group system list entries:
- Groups – Use this option to switch between group and standard view.
- Ranges – The ranges view groups information about CC-managed firewalls based on ranges to provide a better overview of the structure.
- Cluster – Orders the system list according to clusters.
- Standard Selection – Use this option to switch back to the standard view.
- Clear Filter – Discards any filter settings.
Managing System Information
To view detailed information, double-click a firewall in the system list. This opens the Details window that includes the following tabs:
- Log – This tab contains the log messages related to the last software update. Information can be reloaded from the CC by clicking Reload or cleared from the window by clicking Clear. Note that log entries are not cleared from the log files on the firewall itself.
- Versions – This tab lists important modules installed on the firewall and their corresponding version numbers.
- RPMs – This tab lists all RPMs installed on the firewall and indicates their status.
Right-clicking a firewall makes the following entries available:
- Select for Update – Selects the firewall and marks it for an update.
- Perform Update – Performs an update on the selected firewall.
Delete Update – Deletes the selected update. Uploaded software packages are stored in /opt/phion/rangetree/exec/rpms on the Control Center. The partition this folder resides in is 2 GB. To prevent the CC from running out of disk space, regularly delete outdated update packages from the software list.
The Download Portal tab shows all available updates and the latest Firewall Admin version for each cluster version on your Control Center. Click an update package to see more detailed information on the requirements and contents of the update package. To download an app or update package to your client, move your mouse over the download entry and click the download icon.
Files on Control Center
Update packages for CC-managed boxes must be imported into the software list. From there they can then be selected in order to create corresponding update tasks for execution. Current update packages can be downloaded from the Barracuda Networks homepage.
To execute operations, the following options are available in the action bar:
- Schedule File Transfer – Schedules the upload of a software package into the Control Center.
- Import local File – Upload a software package into the Control Center.
Right-clicking the table makes the following entries available:
- Show Package Content – Displays software package information.
- Remove File – Deletes an uploaded software package from the CC.
- Show Filter – Displays the filtering options on top of the section.
To create a software update task for a managed firewall:
- Click Import local File.
- Select a package and click Open to import it into the Control Center.
- Right-click the imported package in the package selection list, select Show Package Content, and verify that it contains the desired software.
- In the software list, select the package, and in the system list, select the firewall(s) that should be updated with the imported package.
- Select Schedule File Transfer. The New Update Task window opens.
Schedule the tasks for Immediate Execution and click OK.
- Check the system list for the status of the package transfer and wait until the task is completed. (This might take some time.)
Barracuda Networks can inform customers of important issues such as security vulnerabilities or other important messages for your CloudGen Firewall and Control Center. This feature is enabled by default for newly installed Control Centers and disabled for updated units. To enable/disable this feature, go to CONTROL > File Updates, select Product Tips from the drop-down list, and click Set Area Config to open the Product Tips configuration. This configuration is applied not only to the Control Center, but also to all managed firewalls. The Control Center will poll for new Product Tips at a regular interval.
Product Tips are displayed in the Message Board on the Dashboard of the managed firewalls and in a pop-up window on the CONTROL > Status Map page as well as on the CONTROL > Firmware Update page on the Firewall Control Center.