It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see End-of-Support for CloudGen Firewall Firmware for further information on our EoS policy.

How to Migrate Managed Hardware Firewalls to a New Model

  • Last updated on

When switching to a new hardware model for your managed firewalls, the configuration is migrated directly on the Control Center. To ensure that no incompatible configuration changes are pushed to the remote (source) firewall during this process, configuration updates must be blocked until the migration is complete and the new firewall is installed. Before starting the migration, verify that the target model is running a firmware version matching the cluster version. Some configuration nodes, such as repository linked configurations containing model-specific settings and cluster-level shared services, must be migrated manually. Repositories containing no model-specific settings are migrated. Repository overrides using model-specific override setting are also migrated, as long as the underlying repository object can be migrated. The migration report lists all configuration nodes that need to be checked or migrated manually. To finish the migration, activate the configuration changes, export the PAR file, and deploy the new firewall. When the new firewall is up and installed in place of the old appliance, unblock the configuration updates. If a second migration is required, you must unblock/block the configuration changes to be able to start the second migration.

Before You Begin

Verify that the firewall model you are migrating to is supported for the source model.  For more information, see Migrating to a New Hardware Model.

Step 1. Block Configuration Updates

  1. Go to CONTROL > Configuration Updates.
  2. Right-click on the firewall and click Block Updates.

The firewall no longer receives configuration updates. Configuration updates may not be unblocked until the hardware has been replaced; otherwise, the remote firewall will receive an invalid configuration.

Step 2. (optional) Migrate the Cluster Version

If required, migrate the cluster version. Migrating the cluster version will migrate the configuration for all firewalls in this cluster. If you only want to update one firewall, create a new cluster, move the firewall to the new cluster, and then migrate the cluster to the desired version.

Step 3. Migrate the Firewall Model

  1. Go to CONFIGURATION > Configuration Tree.
  2. Locate the firewall in the configuration tree.
  3. Right-click the firewall and click Lock.
  4. Right-click the firewall and click Migrate box model to. The Migrate managed firewall window opens.
    migration_managed_01.png
  5. Select the Destination Appliance. Only supported appliances are listed. If the model is greyed out, a cluster migration is required before being able to select this model.
  6. Click Migrate.
    migration_managed_02.png
  7. (optional) Click Export Migration Report to save the log file of the migration.
  8. Click Continue.
  9. Click Finish Migration.
    migration_managed_04.png
  10. (if required) Complete manual migrations, or verify the configuration nodes listed by the migration wizard.
  11. Click Activate.

Step 4. Export the PAR File and Deploy the New Firewall Model

Deploy the migrated firewall configuration via PAR file to the destination firewall. If required, reinstall the firewall with the desired firmware version.

In case of an RMA where the source firewall cannot be updated to the minimum firmware required by the target firewall, contact Barracuda Networks Technical support.

Step 5. Unblock Configuration Updates

When the new firewall is in place and running instead of the old hardware, unblock configuration updates.

  1. Go to CONTROL > Configuration Updates.
  2. Right-click on the firewall and click Unblock Update.