19.8 Performing Patch Upgrades

You can apply over-the-wire upgrades to the appliance as they become available. These over-the-wire upgrades provide a quick and easy method to install patches and fixes from Novell. For more information, see Upgrade Page.

19.8.1 Making Sure You Update the Clone Image before and after Upgrading

Both before and after an upgrade or support pack installation, you must update the appliance's clone image to avoid having the upgraded system overwritten by the older clone image. For more information, see Step 8.

19.8.2 Preserving Configuration Settings

The system upgrade retains all appliance configuration settings. As a precaution, we recommend that you also export your appliance's configuration settings to a DOS-formatted floppy diskette prior to the upgrade.

After the upgrade is completed, if you need to import the configuration file, refer to the “Apply a named configuration file from a floppy” task in Using Telnet or the Command Line.

19.8.3 Upgrading through a Firewall

In most cases upgrading through a firewall is not a problem. If your environment allows HTTP access to the Web, the appliance should be able to retrieve the upgrade files as easily as a browser downloads Web pages.

If normal HTTP access is restricted within your firewall, the appliance attempts to retrieve upgrade packages through firewalls in one of the following three ways:

  1. First, the over-the-wire upgrade checks whether the appliance can use an ICP or CERN parent. If so, the appliance uses the parent to download the upgrade package.

  2. If an ICP or CERN parent is not available, the over-the-wire upgrade checks whether the appliance is configured as a forward proxy with access through the firewall. If it is, the appliance tries the following two methods, in order:

    1. If the firewall acts as a SOCKS server, you must configure the appliance as a SOCKS client. It can then retrieve the upgrade package from the origin server.

    2. If the firewall is not acting as a SOCKS server, you must create a hole through the firewall that allows the appliance to make HTTP connections to the origin server with the upgrade package.

      Close the hole as soon as the upgrade is downloaded.

  3. If neither of the previous two methods is available, the over-the-wire upgrade attempts to establish a direct connection with the origin server.

    To enable this connection, you must create a hole through the firewall and close it as soon as the upgrade is downloaded.

19.8.4 Downloading and Installing the Upgrade

  1. In the browser-based management tool, click System > Actions > Update Clone > Update Clone.

  2. When the update is complete, click the Upgrade page.

  3. Select Enable Download, then type the URL for the upgrade.

    The URL is available from your appliance vendor.

  4. Click the Download Time drop-down list, then select the time you want the download to occur.

  5. Select Enable Install.

  6. Click the Install Time drop-down list, then select the time you want the upgrade to be installed.

  7. Click Apply.

  8. As soon as possible after the upgrade is installed, update the appliance’s clone image by clicking System > Actions > Update Clones.

    This is necessary to avoid the appliance automatically applying an earlier clone image that could make the proxy server unstable.