Use the NSX Manager user interface (UI) to upgrade your current Security Intelligence 1.1.x to Security Intelligence 1.2.x version.

To upgrade from Security Intelligence 1.1.x to Security Intelligence 4.2, you must first upgrade to Security Intelligence 1.2.x using the NSX Manager UI. You can then migrate from Security Intelligence 1.2.x to Security Intelligence 3.2.x and upgrade to Security Intelligence 4.2 using the NSX Manager UI.
注： Security Intelligence 1.2.x cannot be upgraded directly to NSX Application Platform 4.x.
注意：

Do not power off Security Intelligence manually during the upgrade process. It is rebooted as part of the upgrade process.

前提条件

  • Download the Security Intelligence bundle (.mub) file. See Security Intelligence アップグレード バンドルのダウンロード.

  • Ensure that the /image partition in the NSX Manager host has enough space for the MUB file to be uploaded to the NSX Manager host.

  • The /image and /tmp partitions of the Security Intelligence node must have enough space to upload and verify the Security Intelligence upgrade bundle.

手順

  1. From your browser, log in with enterprise administrator privileges to an NSX Manager at https://<nsx-manager-ip-address>.
  2. In NSX Manager, select [System] > [Upgrade].
  3. Locate the Security Intelligence Appliances card and click [Upgrade NSX Intelligence].
  4. In the Upgrade Bundle pane, use the following information to decide which method to use to upload the upgrade bundle.

    • Select [Upload MUB File] if you downloaded the MUB update bundle to a local datastore.

    • Select [Upload From Remote Location] if you downloaded the MUB update bundle to a remote web server.

  5. Enter the filename of the upgrade bundle using the following information.
    重要：

    The MUB filename entered must match exactly as the upgrade bundle file that you downloaded from the Broadcom support portal.

    1. If you selected the [Upload MUB File] method, click [Select File], navigate to the downloaded MUB file location, and select the file.
    2. If you selected [Upload From Remote Location] method, enter the full URL of the MUB file you downloaded on your remote web server.
  6. Click [Upload File].

    The upload might take some time. The progress of the upload and verification of the upgrade bundle is displayed. If you decide not to continue with the upload, click [Cancel]. A message is displayed to confirm the bundle upload cancellation. You must reupload the bundle again to proceed with the upgrade process.

  7. After the upgrade bundle is uploaded successfully, click [Start Upgrade].

    The Upgrade Coordinator is upgraded with the Security Intelligence upgrade information. The Upgrade Coordinator runs in NSX Manager. It is a self-contained web application that orchestrates the upgrade process of Security Intelligence and other NSX objects. The Upgrade Coordinator guides you through the proper upgrade sequence. You can track the upgrade process from the user interface.

  8. After the Upgrade Coordinator is updated successfully, the [Summary] tab shows the current Security Intelligence version and the target version to be used for the upgrade.
    注：

    When performing a maintenance release upgrade, if you upgrade the Security Intelligence Upgrade Coordinator with the maintenance bundle, but you proceed to upgrade NSX Manager first, you must repeat the preceding steps 1–8 when the NSX Manager upgrade is finished.

  9. Click [Run Pre-Checks].

    The health of Security Intelligence is verified. Also, the upgrade pre-check process verifies if there is any NSX upgrade in progress and handles it accordingly. When the pre-checks are finished without errors, the green Ready text and checkmark icon appears on the Security Intelligence upgrade card. If errors were encountered during the pre-checks, the error messages are displayed.

  10. Click [Next].
  11. On the [NSX Intelligence Appliance Upgrade] tab, verify that the target version, upgrade unit, and IP address shown are correct.
  12. Click [Start Upgrade].

    The [Status] column in the table changes from Not Started to In Progress and the upgrade's progress is displayed next to [Details].

    注：

    If the /data partition is large, the step to copy data from that partition might take some time to finish if the partition is large.

    If an error is encountered, the value in the [Status] column is changed to Failed. You can look at the error information provided in [Details] or click [Recent Logs] to view the upgrade process log output. Determine the necessary action you must do to resolve the error encountered.

  13. （オプション） If the upgrade attempt failed and you have determined that it is safe to try the upgrade again, click [Retry Upgrade].

    The upgrade steps that finished successfully in the previous attempt are not redone. The upgrade process step where the failure happened is attempted again. When all the upgrade steps are finished successfully, the Upgrade Successful banner message is displayed and the [Status] value in the table is changed to Upgraded.

  14. Click [Finish].

    The Security Intelligence Appliances card displays the information about the new Security Intelligence version and the summary of the upgrade that finished.

次のタスク

Navigate to [Plan & Troubleshoot] > [Discover & Take Action] and verify that the data flow visualization is intact and new traffic flow data is getting collected as expected.