Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Install SWG 13.0 on E Series

Limited Availability: Upgrade to SWG 13.0 for enhanced stability and security. Contact Skyhigh Support for assistance. 

This section outlines the step-by-step procedure for installing SWG 13.0 on appliances migrating from SWG 12.x or earlier to SWG 13.0.

NOTE:

  • For the initial migration from SWG 12.x or earlier to SWG 13.0, use Virtual Media to mount the SWG 13.0 ISO through the Remote Management Module (RMM) virtual CDROM. Alternatively, use an external USB drive prepared with the SWG 13.0 installation image.
  • Do not use the internal recovery media (edisk) during migration. Use the edisk only as a recovery tool after you successfully complete the initial SWG 13.0 installation.
  • Refer to the Changes in Network Management and Supported SSL Versions sections before proceeding with the configuration.
  • When migrating Secure Web Gateway (SWG) from 12.x or earlier to 13.0, refer to the Backup and Restore section before reimaging the SWG using the SWG 13.0 ISO.
WBG-5x00-E Model

To install SWG 13.0 on the WBG-5x00 E model:

  1. Reboot the appliance.
  2. Enter the BIOS Setup by pressing F2 during POST.

    clipboard_e1ca713a300243294449b874220b81255.png
     
  3. Go to Boot Maintenance Manager > Advanced Boot options > Boot Mode.
  4. Select UEFI.

    clipboard_e28ebc6b72d832a4655ba8f430ae95126.png
     
  5. Press F10 to save the changes and exit the BIOS setup.
  6. Press Y to save configuration changes.

    clipboard_ed5475737f9516104815ec88e7e14a1e9.png

    System reboots after saving the changes.
  7. Press F6 to enter the Boot menu when prompted during POST.

    clipboard_e291d56a7034fbc85fead0f5ef1df40ab.png

NOTE: When migrating from SWG 12.x or earlier to SWG 13.0, the Boot menu initially won't display the SATA P0 and SATA P1 hard drives. This is because the boot mode changes to UEFI, and the existing HDDs aren't UEFI-partitioned. After the SWG 13.0 installation is complete and successful, the hard disks will appear in the Boot menu.

  1. Select the boot media: 
    • If booting the ISO using RMM Virtual Media, select UEFI GENERIC Virtual CDROM YS0J.

      clipboard_e40b2b7451a35b9b94da68f8fb19eb619.png

      OR
    • If booting the appliance using Recovery Media (e-disk), select UEFI SanDisk’ Cruzer Fit.

      clipboard_e5120b5f6a5ac058ed6a478858dfd0198.png

      OR
    • If booting the appliance using an External USB, select UEFI Micron_5300_MTFDDAK960TDT 21172E92BDC9 (The option varies based on the USB drive plugged in).

      clipboard_eb3afc5dcb982639066f12eb86bebaaa0.png
       
  2. The installer displays the installation build number. Press Enter to continue installing the build (If not selected manually, the highlighted installer executes automatically in 50 seconds).

    clipboard_e6cca23f753e5c725fb96a35c27cf6fa5.png
  3. Continue with the installation wizard.
    For more details on installation and initial setup, refer to About Installing Secure Web Gateway for the First Time and Implement the Initial Configuration Settings

IMPORTANT: After completing the SWG 13.0 installation, update the recovery media by writing the SWG 13.0 ISO to the edisk using the mwg-edisk tool. This ensures that the built-in recovery partition contains the SWG 13.0 image instead of the previous SWG 12.x or earlier image and supports proper system recovery if a failure occurs later. 

NOTE: The hard disk partition schema is GPT. The hard disk is partitioned as sdx1, sdx2, and sdx3, where sdx1 is not part of the RAID array, and it stores the bootloader EFI files, sdx2 and sdx3 are for /opt and /cache partitions, which a part of the RAID array (x being the hard disk name). For example, sda, sdb.

TIP: To collect the hardware logs for troubleshooting, install the getlogs package from the yum repository and set the permission of /opt/Skyhigh/ldt/getlogs/getlogs.sh file to executable permission. Sample file: /opt/Skyhigh/ldt/getlogs/getlogs.sh filename.zip 

WBG-4500-E Model 

To install SWG 13.0 on the WBG-4500-E model:

  1. Reboot the appliance.
  2. Enter the Boot menu by pressing F11 when prompted:
    • If booting the ISO using RMM Virtual Media, select UEFI: AMI Virtual CDROMO 1.00.

      image.png

      OR
    • If booting the ISO using e-disk, select the added recovery media. For example, Recovery-Media, as shown in the following image.

NOTE:  The e-disk is not available in the Boot menu by default. To add it manually, refer to the Add Recovery Media (e-disk) Manually in the Boot Menu section.

clipboard_e172338cd56ea7509453ae114e87c9c58.png 

OR

  • If booting the appliance using an External USB, select UEFI: SanDISK Partition 1 ( Name depends on the USB drive plugged-in). 

    image.png
  1. The installer displays the installation build number. Press Enter to continue installing the build (If not selected manually, the highlighted installer executes automatically in 50 seconds).

    clipboard_ed8f0fa99e9caff30a43ff387a251e301.png
     
  2. Continue with the installation wizard.
    For more details on installation and initial setup, refer About Installing Secure Web Gateway for the First Time and Implement the Initial Configuration Settings

NOTE: A few initial non-critical ACPI BIOS errors appear in the WBG-4500-E appliance at boot. However, this has no impact on the installation.

Add Recovery Media (e-disk) Manually in the Boot Menu

To add the recovery media (e-disk) manually in the Boot menu:

  1. Reboot the appliance.
  2. Press Del to enter the BIOS setup.
  3. Go to the Boot tab and select Add New Boot Option.

    clipboard_eb398412374dca27a3c48e60a9ce5ba93.png

     
  4. Select Add boot option.

    clipboard_e0dcef7d41a84a529207ec73b1ca19c0e.png


    The Add boot option dialogue box appears.
  5. Enter the preferred name for the e-disk that will be displayed in the Boot menu. For example, Recovery-Media.

    clipboard_ec806c6fc7fff7bbe3c38d4b0e2d18442.png
     
  6. Select Path for boot option to configure the boot path.

    clipboard_e3fbdcdaefc490a8b0e307c31851ed6fc.png
     
  7. Select MLOS 2MB.

    clipboard_e79b8c53786a2e6a147e10553436c319c.png
     
  8. Select the default path \EFI\BOOT\BOOTX64.efi.

    clipboard_ee5cfee4e5e5337eb8e40b9d97a24c1b3.png

    clipboard_e4ba3a71747ac470aa3df919a4a2de2e9.png

    clipboard_e1a01a8d9880dab2c28426b900a0b9706.png

    The path for boot option displays.

    clipboard_e14fcc54a35fead0a7d003ee216c2d47e.png
     
  9. Select Create.
    The boot option is added successfully. 

    clipboard_e84e326720f06b0a7cee0ade4c7f1595a.png
     
  10. Click Ok.

    clipboard_e7282ad30894b5ffa216c841e4ffb6024.png
     
  11. Press Esc to exit the Add boot option section.
  12. Select Yes or press F4 to save the changes and exit. 

    clipboard_ee458f62718ff103a625ff5a4f1a46365.png
    The system will boot up with the existing version.

To continue installing SWG 13.0 on the WBG-4500-E model, see Select the Added Recovery Media.

NOTE: To recover and boot the system after a RAID partition failure due to a missing disk, refer to the Troubleshoot RAID Partition failure section.

 

  • Was this article helpful?