Use the NSX Manager user interface (UI) to upgrade your current Security Intelligence 1.1.x to Security Intelligence 1.2.x version.

To upgrade from Security Intelligence 1.1.x to Security Intelligence 4.2, you must first upgrade to Security Intelligence 1.2.x using the NSX Manager UI. You can then migrate from Security Intelligence 1.2.x to Security Intelligence 3.2.x and upgrade to Security Intelligence 4.2 using the NSX Manager UI.
注： Security Intelligence 1.2.x cannot be upgraded directly to NSX Application Platform 4.x.
小心：

Do not power off Security Intelligence manually during the upgrade process. It is rebooted as part of the upgrade process.

前提条件

  • Download the Security Intelligence bundle (.mub) file. See 下载 Security Intelligence 升级包.

  • Ensure that the /image partition in the NSX Manager host has enough space for the MUB file to be uploaded to the NSX Manager host.

  • The /image and /tmp partitions of the Security Intelligence node must have enough space to upload and verify the Security Intelligence upgrade bundle.

过程

  1. From your browser, log in with enterprise administrator privileges to an NSX Manager at https://<nsx-manager-ip-address>.
  2. In NSX Manager, select System > Upgrade.
  3. Locate the Security Intelligence Appliances card and click Upgrade NSX Intelligence.
  4. In the Upgrade Bundle pane, use the following information to decide which method to use to upload the upgrade bundle.

    • Select Upload MUB File if you downloaded the MUB update bundle to a local datastore.

    • Select Upload From Remote Location if you downloaded the MUB update bundle to a remote web server.

  5. Enter the filename of the upgrade bundle using the following information.
    重要说明：

    The MUB filename entered must match exactly as the upgrade bundle file that you downloaded from the Broadcom support portal.

    1. If you selected the Upload MUB File method, click Select File, navigate to the downloaded MUB file location, and select the file.
    2. If you selected Upload From Remote Location method, enter the full URL of the MUB file you downloaded on your remote web server.
  6. Click Upload File.

    The upload might take some time. The progress of the upload and verification of the upgrade bundle is displayed. If you decide not to continue with the upload, click Cancel. A message is displayed to confirm the bundle upload cancellation. You must reupload the bundle again to proceed with the upgrade process.

  7. After the upgrade bundle is uploaded successfully, click Start Upgrade.

    The Upgrade Coordinator is upgraded with the Security Intelligence upgrade information. The Upgrade Coordinator runs in NSX Manager. It is a self-contained web application that orchestrates the upgrade process of Security Intelligence and other NSX objects. The Upgrade Coordinator guides you through the proper upgrade sequence. You can track the upgrade process from the user interface.

  8. After the Upgrade Coordinator is updated successfully, the Summary tab shows the current Security Intelligence version and the target version to be used for the upgrade.
    注：

    When performing a maintenance release upgrade, if you upgrade the Security Intelligence Upgrade Coordinator with the maintenance bundle, but you proceed to upgrade NSX Manager first, you must repeat the preceding steps 1–8 when the NSX Manager upgrade is finished.

  9. Click Run Pre-Checks.

    The health of Security Intelligence is verified. Also, the upgrade pre-check process verifies if there is any NSX upgrade in progress and handles it accordingly. When the pre-checks are finished without errors, the green Ready text and checkmark icon appears on the Security Intelligence upgrade card. If errors were encountered during the pre-checks, the error messages are displayed.

  10. Click Next.
  11. On the NSX Intelligence Appliance Upgrade tab, verify that the target version, upgrade unit, and IP address shown are correct.
  12. Click Start Upgrade.

    The Status column in the table changes from Not Started to In Progress and the upgrade's progress is displayed next to Details.

    注：

    If the /data partition is large, the step to copy data from that partition might take some time to finish if the partition is large.

    If an error is encountered, the value in the Status column is changed to Failed. You can look at the error information provided in Details or click Recent Logs to view the upgrade process log output. Determine the necessary action you must do to resolve the error encountered.

  13. （可选） If the upgrade attempt failed and you have determined that it is safe to try the upgrade again, click Retry Upgrade.

    The upgrade steps that finished successfully in the previous attempt are not redone. The upgrade process step where the failure happened is attempted again. When all the upgrade steps are finished successfully, the Upgrade Successful banner message is displayed and the Status value in the table is changed to Upgraded.

  14. Click Finish.

    The Security Intelligence Appliances card displays the information about the new Security Intelligence version and the summary of the upgrade that finished.

下一步做什么

Navigate to Plan & Troubleshoot > Discover & Take Action and verify that the data flow visualization is intact and new traffic flow data is getting collected as expected.