We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

How to Update High Availability Clusters

  • Last updated on

To prevent downtime when updating your high availability cluster, block all services on the secondary firewall. Then update the firmware on the secondary firewall. After the update, restart all services on the updated firewall and repeat the process with the primary firewall. Each firewall can only be updated to the next firmware version according to the migration path. If two updates are required, repeat the process below for each update package.

Step 1: Block all Services on the Secondary Firewall

When you block all services, the control service shuts them down and sends a signal that starts all services on the HA partner unit. Keep in mind that when you block all services, the control service cannot perform automatic failovers.

  1. Log into the secondary firewall.
  2. Go to CONTROL > Services.
  3. In the right half of the window, click Standby.
  4. A list with options is displayed.
  5. Click Block Shared Services.

Step 2: Update the Secondary Firewall

Update the firmware on the secondary firewall. For more information, see How to Install Updates via Barracuda Firewall Admin or How to Update Managed High Availability Clusters with Automatic Failover.  

Do not interrupt the update. The updated system will reboot and display the new version on the console login prompt.

Step 3: Restart all Blocked Services and Perform a Manual Failover

When you stop multiple services after they have been blocked, you must restart them so they can perform automatic failovers. When multiple services are blocked or go down on an active unit, they will be automatically started in the HA-partner.

  1. Log into the secondary firewall.
  2. Go to CONTROL > Services and click Stop Shared Services.

  3. Log into the primary firewall.

  4. Go to CONTROL > Services page, and click Block Shared Services.
    All the servers are taken over by the secondary firewall.

Leave the primary unit in standby mode until you have verified that the secondary firewall is operating correctly. You can verify this by stopping the primary unit services.

Step 4: Update the Primary Firewall

Do not interrupt the update. Depending on the update, the firewall reboots after the update.

Step 5: Transfer all Shared Services Back to the Primary Firewall

Manually trigger a failover to transfer all blocked service from the secondary to the primary firewall.

  1. Log into the primary firewall.
  2. Go to CONTROL > Services.
  3. Click Stop Shared Services.
  4. Log into the secondary firewall.
  5. Go to CONTROL > Services.
  6. Click Block Services.
  7. Wait for the primary firewall to bring up all shared services and then click Stop Shared Services to place the secondary firewall in standby.
Last updated on