Firewall SFOS v21 update with Central?

Hello,

we would like to update SFOS/XGS appliances of our customers to v21 with central.

We have to use central because there is no other way to do this scheduled at night. Version 21 GA was 17.10.2024 and the update is still not possible to do with central? Really?

How to handle security updates / critical CVEs if you have to wait weeks to do that scheduled with central for all your customers?

regards

Parents
  • Is there a Security Update, you need in V21.0 GA? 

    GA Releases usually take a long time to remain in staging - We are doing this, as most customers and partner only install it, if it is available on the firewall and as we have a big installation base, we want to slow down the installation (staging) to monitor issues coming up. 

    If we would release it all to the entire installation base, something breaks, we would have to roll back all customers etc. 

    SFOS as UTM has a slow Release cycle for GA releases. 

    Based on the approach with Hotfixes, we can also react differently to CVEs and other issues. 

    __________________________________________________________________________________________________________________

Reply
  • Is there a Security Update, you need in V21.0 GA? 

    GA Releases usually take a long time to remain in staging - We are doing this, as most customers and partner only install it, if it is available on the firewall and as we have a big installation base, we want to slow down the installation (staging) to monitor issues coming up. 

    If we would release it all to the entire installation base, something breaks, we would have to roll back all customers etc. 

    SFOS as UTM has a slow Release cycle for GA releases. 

    Based on the approach with Hotfixes, we can also react differently to CVEs and other issues. 

    __________________________________________________________________________________________________________________

Children
  • I know the update staging process - and this is ok and you also do that process locally.

    The Central Update should be available as soon as the locally update on the appliance is possible and that`s it...

    No security issue as far as I know (I hope for security updates the central update will be faster) - We would like to have V21.0 GA especially on the appliances where the v 21 update is locally already available...

    And also the speed of v 21 is a really improvement...

    regards