Version 5.0.
Copyright Notice Copyright © 2004-2011, Barracuda Networks, Inc., 3175 S. Winchester Blvd, Campbell, CA 95008 USA www.barracuda.com v5.0.5-120221-02-0221 All rights reserved. Use of this product and this manual is subject to license. Information in this document is subject to change without notice. Trademarks Barracuda NG Firewall is a trademark of Barracuda Networks. All other brand and product names mentioned in this document are registered trademarks or trademarks of their respective holders.
Content General . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 GPL Compliance Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Supported Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Minimum System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Known Issues . . . . . . . . . . . . . . . . . . . . .
Release and Migration Notes
General Read this document before updating your system If you are going to update from release version 4.2 to Barracuda NG Firewall 5.0.5, Barracuda Networks strongly recommends to study the Barracuda NG Firewall 5.0 Migration Instructions available for download at http://barracuda.com/doc, as, under certain circumstances, no countermanding is possible once the updating process was initiated.
Supported Hardware Table 1–1 Barracuda Networks Appliances Supported By Barracuda NG Firewall 5.0.5 Barracuda Networks Appliances Supported by Barracuda NG Firewall 5.0.5 Hardware Appliances: F10, F15, F100, F200, F300, C400, C610, F400, F600, F800, F900 F10 Rev. B*, F100 Rev. B*, F101 Rev. B*, F200 Rev. B*, F201 Rev. B*, F300 Rev. B*, F301 Rev. B* Virtual Appliances: VC400, VC610, VC820 Standard Hardware: Please consult the Barracuda Networks Technical Support for information on Barracuda NG Firewall 5.0.
Minimum System Requirements If you are going to upgrade standard hardware or phion netfence hardware to Barracuda NG Firewall 5.0.5, please ensure that at least 2 GB of free storage space is available on the root partition. If this minimum amount of space is not available, Barracuda Networks highly recommends to re-install the system with a larger root partition instead of upgrading.
Release and Migration Notes - Supported Hardware
Updates with Firmware 5.0 Minor Release 5 Update Matrix Table 1–5 Update matrix – supported and not supported update cases Target Version 5.0 5.0.1 5.0.2 5.0.3 5.0.4 5.0.5 - - - - - - 4.2.11 4.2.13 4.2.14 4.2.15 4.2.16 4.2.17 - 4.2.18 5.0 - 5.0.1 - - 5.0.2 - - - 5.0.3 - - - - 5.0.
Software Modules and Components Affected by Minor Release 5.0.5 Table 1–6 Affected Software Modules and Components Software Modules Affected by Minor Release 5.0.1 5.0.2 5.0.3 5.0.4 5.0.
Bugfixes Included with Barracuda NG Firewall 5.0.5 Barracuda NG Installer Table 1–7 Barracuda NG Installer Description In rare cases, units were erroneously detected as XEN units. This issue was fixed. Barracuda NG Firewall Table 1–8 Barracuda NG Firewall Module Description Access Control Service An issue with the Dutch keyboard layout causing the VPN applet to erroneously activate the German keyboard layout was fixed.
Table 1–8 Barracuda NG Firewall Module Description Network On models with WiFi, it was erroneously not possible to choose the ath2 WiFi interface within the routing configuration. This issue was fixed. Network In rare cases, OSPF introduced routes were not introduced as intended, because, under certain circumstances, summary routes received from OSPF neighbors were not written into the routing table. This issue was fixed.
Determine Your Update Scenario If you are going to update firmware version 4.2 to Barracuda NG Firewall 5.0.5, Barracuda Networks strongly recommends to study the instructions given in this chapter, as, under certain circumstances, no countermanding is possible once the updating process was initiated. Updating to Barracuda NG Firewall minor release 5.0.5 is only possible from release versions 4.2.x, 5.0, 5.0.1, 5.0.2, 5.0.3 or 5.0.4. Direct updating from release versions 4.0.x or 3.x is not possible.
Before beginning the updating process, you should clarify which types of hardware and administrative configuration you have. Barracuda NG Firewall 5.0.5 and its predecessors allow different administrative configurations.
Updating Unmanaged Units or NG Control Centers Updating Units or NG Control Centers Using SSH For speed reasons, Barracuda Networks recommends using this method of updating for all appliances in general, especially for those based on a flash drive or slower hardware. Step 1: Copy Before copying the package onto the unit as described below, make sure that there is no old minor release or patch package lurking within the /var/phion/packages/ directory. The directory must not contain any files.
Updating HA-Synced Units or HA-Synced NG Control Centers In the instructions below, the term "primary unit" refers to the unit used for regular operation, while "HA unit" refers to the secondary unit used as a failover system. For Firewall and Configuration HA synchronizing, the primary and the HA unit must both run at least firmware release versions between 4.2.11 and 5.0.5.
Proceed after having assured that the HA unit is fully functional. • Unblock the (standby) servers on the HA unit by clicking Stop Server within Control > Servers. • Log-in to the primary unit using Barracuda NG Admin. • Switch all servers from the primary to the HA unit and verify for correct operability. Therefore, Block all Servers on the primary unit. You may leave the primary unit in standby mode until correct operability of the HA unit has been verified.
Updating NG Control Center Managed Units To make use of the multi-release capabilities of Barracuda NG Control Center, all units within one cluster must run under the same software major release version. Migration of the NG CC configuration is only available for all units, servers and services of a cluster simultaneously. Step 1: Import the Update Package into the NG Control Center • Log-in to the Barracuda NG Control Center using Barracuda NG Admin.
No more interaction with the unit is necessary. Wait until the update is finished. Depending on the hardware, it will need from 15 minutes on the fastest appliances up to 60 minutes on the flash appliances. Take a look into the box log file at Box > Logs > Box\Release\update after the update process has been finished. In case of a not succeeded update please consult Box\Release\update_hotfix for a detailed log.
Migrating from phion netfence to Barracuda NG Firewall 5.0.5 Release version 5.0 of Barracuda NG Firewall was a switchpoint for customers that have been using phion netfence before. With release 5.0, phion netfence was replaced by Barracuda NG Firewall. Apart from the new features and a new interface design, the usage concepts and system architecture stay the same. If you are migrating from phion netfence 4.2.x to Barracuda NG Firewall 5.0.
Updating Standard Hardware from 4.2.x to 5.0.5 General Due to a kernel version change between 4.2.x and 5.0.5 (Linux kernel 2.4 was changed to Linux kernel 2.6), the enumeration of NICs may on some hardware sort the ethX devices in a different order, resulting in a loss of management access. Therefore, a procedure has now been implemented to rename the interfaces after upgrading to 5.0.5 to stay identically with the 4.2.x interface names.
Step 2: Generate the Mapping Data • Log-in to the unit via ssh as root and issue the following command: CreateMACMapping Running this program multiple times will do no harm. • Copy the output lines of the program beginning with CM and those beginning with CI to the clipboard. Step 3: Apply the Mapping Data • On standalone units, open the Box Network Configuration within Barracuda NG Admin.
