This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AWS UTM HA Firmware updates

Can anyone tell me how firmware updates are applied when using a HA deployment in AWS. It looks like the public AMI that the Auto Scaling group references is updated. Do the actual instances also get updated automatically or do we need to shutdown the old instances? I am having a hard time finding documentation on how to perform firmware updates on a UTM HA appliance running in AWS.

This thread was automatically locked due to age.

Parents

0 Niel Zanfardino over 6 years ago

Anyone?
Cancel
Vote Up 0 Vote Down

Cancel
0 DavidOkeyode over 6 years ago in reply to Niel Zanfardino

Hello. To update an HA deployment of the UTM on AWS, you will need to modify the AMI ID in the cloud formation stack that you used for the deployment to the latest AMI image. You can obtain the latest AMi image by referring to this Github repository - https://github.com/sophos-iaas/aws-cf-templates/tree/master/utm

This way, the update will occur using the AWS cloud formation update mechanism with a new UTM built, config downloaded from the S3 bucket and Elastic IP moved to the new instance. As always, ensure you follow your internal change management process of testing and roll back plans and always ensure you have a a backup of your configuration.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 DavidOkeyode over 6 years ago in reply to Niel Zanfardino

Hello. To update an HA deployment of the UTM on AWS, you will need to modify the AMI ID in the cloud formation stack that you used for the deployment to the latest AMI image. You can obtain the latest AMi image by referring to this Github repository - https://github.com/sophos-iaas/aws-cf-templates/tree/master/utm

This way, the update will occur using the AWS cloud formation update mechanism with a new UTM built, config downloaded from the S3 bucket and Elastic IP moved to the new instance. As always, ensure you follow your internal change management process of testing and roll back plans and always ensure you have a a backup of your configuration.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BrucekConvergent over 6 years ago in reply to DavidOkeyode

Hey Neil, good to see you on here (I am one of the guys at the reseller you contacted the other day -- I'm one of the mods on here) ... Check out the release notes... https://community.sophos.com/products/unified-threat-management/b/utm-blog/posts/sophos-utm-9-506-on-aws-release-notes

I recommend that you create a test environment to test any sort of process you create for an AWS environment, as small mistakes can cause big headaches to correct later.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Sophos Platinum Partner

--------------------------------------

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 Sebastian Schenzel over 6 years ago in reply to DavidOkeyode

Hi David,

thanks for the tip with the modification of the AMI-ID. The thing is, under the link you posted, the latest version of UTM is 9.506. We recently updated our UTMs to 9.509-3 and are thinking about extending them to a ha-cluster. So how can we create a cluster with UTM version 9.509-3? Can you tell when the 509er version will be released to AWS?

Thanks in regards,

Sebastian
Cancel
Vote Up 0 Vote Down

Cancel