Standalone Appliance
Before upgrading standalone appliances, complete all prerequisites. For more details, see Prerequisites to Upgrade Web Gateway Appliance.
Upgrade an Appliance using the Command Line
- Log in to the SWG command line as a root user.
- Type mwg-switch-repo -l and press enter.
The output helps you identify what repo is currently set and decide on the following scenario:- If no change is required, continue with step 3.
- To change the current repo to main, enter mwg-switch-repo main and press enter.
- To change the current repo to a specific version, enter mwg-switch-repo --sticky <version number> and press enter.
[root@mgmt_1]# mwg-switch-repo main Creating repository configuration for Non-sticky MWG main (release) Testing connectivity to repository. This may take a while. Repository configuration has been updated. Now run "yum upgrade yum && yum upgrade" to perform the actual upgrade. [root@mgmt_1]# [root@mgmt_1]# [root@mgmt_1]# mwg-switch-repo -l Current Configuration: Non-sticky MWG main (release) OR To go to specific version, follow below steps. ‘mwg-switch-repo -–sticky’ will make sure that SWG is updated to intended version ‘Current configuration: Non-sticky’ will automatically change to sticky when you run below command. [root@mgmt_1 ]# mwg-switch-repo --sticky <version number> Eg:[root@mgmt_1 ]# mwg-switch-repo --sticky 12.2.18
- Start the
yum upgrade yumprocess type and accept upgrades.
NOTE: If there is an upstream proxy that provides internet access to the Secure Web Gateway, then a proxy needs to be set up in the SWG console. Follow the steps below to configure the proxy settings in the console.
To set temporary proxy, run following command. * [root@mgmt_1]# export http_proxy=http://192.168.xx.xx:8080/ * [root@mgmt_1]# export https_proxy=http://192.168.xx.xx:8080/ To set permanent proxy 1. Log on to the SWG command line as a root user. 2. Edit /etc/environment file. [root@mgmt_1]# sudo vi /etc/environment ## Press insert key and paste below lines in it. http_proxy="http://192.168.xx.xx:8080/" https_proxy="http://192.168.xx.xx:8080/" http_proxy="http://<hostname>:<port>/" https_proxy="http://<hostname>:<port>/" If authentication required: http_proxy="http://<username>:<password>@<hostname>:<port>/" http_proxy="http://<username>:<password>@<hostname>:<port>/" 3. Press esc key and type ':wq' + enter to save the changes. 4. Run below command to check if file is saved or not. [root@mgmt_1]# cat /etc/environment 5.Logout from console and login again to activate the proxy settings.
NOTE: Skyhigh recommends setting a temporary proxy when upgrading SWG from the console.
- Enter yum upgrade.
The appliance will contact the repository and identify the packages to be installed.
[root@mgmt_1]# yum upgrade
- Packages to be upgraded are displayed. Enter y to accept.
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
kernel x86_64 4.19.256-3.3.mlos3.mwg mlos-main-gen_release-base 14 M
Updating:
krb5-libs x86_64 1.15.1-55.mlos3.mwg mlos-main-gen_release-base 811 k
krb5_openssl1.1-libs
x86_64 1.15.1-55.1.mlos3.mwg mlos-main-gen_release-base 805 k
ledmon x86_64 0.92-3.1.mlos3.mwg mlos-main-gen_release-base 65 k
mwg x86_64 12.2.18-44482.mlos3.mwg mlos-main-gen_release-base 106 M
mwg-config x86_64 12.2.18-44482.mlos3.mwg mlos-main-gen_release-base 207 k
mwg-mfetsc x86_64 12.2.18-44482.mlos3.mwg mlos-main-gen_release-base 1.4 M
mwg-release noarch 12.2.18-44482.mlos3.mwg mlos-main-gen_release-base 5.8 k
mwg-ui noarch 12.2.18-44482.mlos3.mwg mlos-main-gen_release-base 138 M
openssl-mfe x86_64 1:1.0.2zg-1.mlos3 mlos-main-gen_release-base 509 k
openssl-mfe-libs
x86_64 1:1.0.2zg-1.mlos3 mlos-main-gen_release-base 1.3 M
pkcs11engine_openssl1.1
x86_64 0.4.12-1.mlos3.mwg mlos-main-gen_release-base 53 k
sudo x86_64 1.8.23-15.mlos3 mlos-main-gen_release-base 841 k
xorg-x11-server-Xvfb
x86_64 1.20.4-22.mlos3.mwg mlos-main-gen_release-base 857 k
xorg-x11-server-common
x86_64 1.20.4-22.mlos3.mwg mlos-main-gen_release-base 57 k
Transaction Summary
================================================================================
Install 1 Package
Upgrade 14 Packages
Total download size: 265 M
Is this ok [y/d/N]: y
- After the upgrade, enter reboot to complete the installation.
Installed: kernel.x86_64 0:4.19.256-3.3.mlos3.mwg Updated: krb5-libs.x86_64 0:1.15.1-55.mlos3.mwg krb5_openssl1.1-libs.x86_64 0:1.15.1-55.1.mlos3.mwg ledmon.x86_64 0:0.92-3.1.mlos3.mwg mwg.x86_64 0:12.2.18-44482.mlos3.mwg mwg-config.x86_64 0:12.2.18-44482.mlos3.mwg mwg-mfetsc.x86_64 0:12.2.18-44482.mlos3.mwg mwg-release.noarch 0:12.2.18-44482.mlos3.mwg mwg-ui.noarch 0:12.2.18-44482.mlos3.mwg openssl-mfe.x86_64 1:1.0.2zg-1.mlos3 openssl-mfe-libs.x86_64 1:1.0.2zg-1.mlos3 pkcs11engine_openssl1.1.x86_64 0:0.4.12-1.mlos3.mwg sudo.x86_64 0:1.8.23-15.mlos3 xorg-x11-server-Xvfb.x86_64 0:1.20.4-22.mlos3.mwg xorg-x11-server-common.x86_64 0:1.20.4-22.mlos3.mwg Complete! [root@mgmt_1]# reboot
The appliance reboots, and the upgrade is completed.
Upgrade an Appliance using the UI Manager
NOTE: When you have previously set a sticky repository using the yum command, the GUI manager will upgrade only to the version in that repository. To use the GUI for upgrades, you must reset the yum command to the main repository.
- Log in to the Web UI.
- Go to Configuration.
- Select an appliance.
- Click Update appliance software.
NOTE: Upgrading through the UI Manager updates the appliance software to the latest stable main release. For details on the latest main release, see Content & Cloud Security Portal.
Upgrade an Appliance Offline or Online
-
Online Upgrade
An online upgrade is performed when SWG has internet access to the Skyhigh update servers. In this scenario, the appliance uses an existing online repository to access and download the required upgrade software.
-
Offline Upgrade
An offline upgrade is performed when SWG does not have internet access to the Skyhigh update servers. In this scenario, the upgrade is carried out using the mwg-update tool, which creates a temporary local repository on the appliance using the packages provided in the ISO file. The system uses this repository to perform the upgrade, and the temporary repository is automatically removed after the upgrade completes. For more details, see Upgrade SWG using the mwg-update Tool.
Download the latest SWG ISO file: https://contentsecurity.skyhigh.clou..._mwg7_download
For older SWG ISO file: https://contentsecurity.skyhigh.cloud/software_mwg7_archive
NOTE: Once the upgrade is completed, make sure to verify it against the checklist. See Upgrade Checklist.