Install SWG 13.0 on F Series

Last updated
Save as PDF

Limited Availability: Upgrade to SWG 13.0 for enhanced stability and security. Contact Skyhigh Support for assistance.

This section outlines the step-by-step procedure for installing SWG 13.0 on appliances migrating from SWG 12.x or earlier to SWG 13.0.

NOTE:

For the initial migration from SWG 12.x or earlier to SWG 13.0, use Virtual Media to mount the SWG 13.0 ISO through the Remote Management Module (RMM) virtual CDROM. Alternatively, use an external USB drive prepared with the SWG 13.0 installation image.
Do not use the internal recovery media (edisk) during migration. Use the edisk only as a recovery tool after you successfully complete the initial SWG 13.0 installation.
Refer to the Changes in Network Management and Supported SSL Versions sections before proceeding with the configuration.
When migrating Secure Web Gateway (SWG) from 12.x or earlier to 13.0, refer to the Backup and Restore section before reimaging the SWG using the SWG 13.0 ISO.

WBG-5x00-F Model

To install SWG 13.0 on the WBG-5x00-F model:

Log in to the RMM console.
Reboot the appliance.
Enter the BIOS Setup by pressing DEL during POST.
Go to Boot > Boot Mode Select.
Select UEFI.
Go to Save & Exit and select Save Changes.
Select Yes to confirm.

Reboot the appliance after saving changes.
Mount the ISO file.
Press F11 to enter the Boot menu when prompted during POST.

NOTE:

Only the USB installation and RMM installation boot options are supported for first-time setup.
When migrating from SWG 12.x or earlier to SWG 13.0, the Boot menu initially won't display the SATA P0 and SATA P1 hard drives. This is because the boot mode changes to UEFI, and the existing HDDs aren't UEFI-partitioned. After the SWG 13.0 installation is complete and successful, the hard disks will appear in the Boot menu.

Select the boot media:
- If booting the ISO using RMM Virtual Media, select UEFI: ATEN Virtual CDROM YSOJ.
  
  NOTE: Use this media as the default method to install SWG 13.0 during the first migration of an appliance from SWG 12.x or earlier to SWG 13.0.
  
  OR
- If booting the appliance using an External USB, select UEFI OS (Sandisk Cruzer Fit Blade 1.27) (The option varies based on the USB drive plugged in).
  
  OR
- If booting the appliance using Recovery Media (e-disk), select WG Appliance (edisk) (M2 (P80) 3TE4).
The installer displays the installation build number. Press Enter to continue installing the build (If not selected manually, the highlighted installer executes automatically in 50 seconds).

Continue with the installation wizard.
For more details on installation and initial setup, refer About Installing Secure Web Gateway for the First Time and Implement the Initial Configuration Settings

IMPORTANT: After completing the SWG 13.0 installation, update the recovery media by writing the SWG 13.0 ISO to the edisk using the mwg-edisk tool. This ensures that the built-in recovery partition contains the SWG 13.0 image instead of the previous SWG 12.x or earlier image and supports proper system recovery if a failure occurs later.

Use only the mwg-edisk write <iso> command to write the ISO. Using other mwg-disk commands may result in errors, such as: error: failed to mount NVMe ESP partition: /dev/nvme0n1p1

NOTE: The hard disk partition schema is GPT. The hard disk is partitioned as sdx1, sdx2, and sdx3, where sdx1 is not part of the RAID array, and it stores the bootloader EFI files, sdx2 and sdx3 are for /opt and /cache partitions, which a part of the RAID array (x being the hard disk name). For example, sda, sdb.

TIP: To collect the hardware logs for troubleshooting, install the getlogs package from the yum repository and set the permission of /opt/Skyhigh/ldt/getlogs/getlogs.sh file to executable permission. Sample file: /opt/Skyhigh/ldt/getlogs/getlogs.sh filename.zip