Version 5.0.
Copyright Notice Copyright © 2004-2011, Barracuda Networks, Inc., 3175 S. Winchester Blvd, Campbell, CA 95008 USA www.barracuda.com v5.0.3-110621-01-0621 All rights reserved. Use of this product and this manual is subject to license. Information in this document is subject to change without notice. Trademarks Barracuda NG Firewall is a trademark of Barracuda Networks. All other brand and product names mentioned in this document are registered trademarks or trademarks of their respective holders.
Content General . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 GPL Compliance Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Supported Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Minimum System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Known Issues . . . . . . . . . . . . . . . . . . . . .
Release and Migration Notes
General Read this document before updating your system If you are going to update from release version 4.2 to Barracuda NG Firewall 5.0.3, Barracuda Networks strongly recommends to study the Barracuda NG Firewall 5.0 Migration Instructions available for download at http://barracuda.com/doc, as, under certain circumstances, no countermanding is possible once the updating process was initiated. For in-depth information about new features and changes in terminology introduced with release version 5.
Supported Hardware Table 1–1 Barracuda Networks Appliances Supported By Barracuda NG Firewall 5.0.3 Barracuda Networks Appliances Supported by Barracuda NG Firewall 5.0.3 Hardware Appliances: F10, F15, F100, F200, F300, C400, C610, F400, F600, F800, F900 Virtual Appliances: VC400, VC610, VC820 Standard Hardware: Please consult the Barracuda Networks Technical Support for information on Barracuda NG Firewall 5.0.3 on standard hardware..
Known Issues Advice about known issues is available at www.barracuda.com or through the Barracuda Networks support. If you are using standard hardware and / or updating from phion netfence, please pay also attention to the Barracuda NG Firewall 5.0 Migration Instructions and the Barracuda NG Firewall 5.2 Migration Instructions available for download at http://barracuda.com/doc, as in this case numerous known issues and hardware restrictions will apply.
Updates with Firmware 5.0 Minor Release 3 Update Matrix Table 1–4 Update matrix – supported and not supported update cases Target Version 5.0 5.0.1 5.0.2 5.0.3 - - - - 4.2.11 4.2.13 4.2.14 4.2.15 4.2.16 5.0 - 5.0.1 - - 5.0.2 - - - Current Version 4.2.10 and earlier If you are going to update from a firmware release version below 5.0, then please see the Barracuda NG Firewall 5.
Software Modules and Components Affected by Minor Release 5.0.3 Table 1–5 Affected Software Modules and Components Software Modules Affected by Minor Release 5.0.1 5.0.2 5.0.
Bugfixes Included with Barracuda NG Firewall 5.0.3 Barracuda NG Admin Table 1–6 Barracuda NG Admin Description Within the Network Interface Configuration, pop-ups erroneously appeared every time after changing the Appliance Sub Model Type in a VLAN interface. This issue was fixed. In rare cases, the Send Changes button was erroneously disabled within the Personal Firewall Rules Configuration. This issue was fixed.
Table 1–8 Barracuda NG Firewall Module Description Firewall The detection of large packet sizes (PMTU discovery) did not work in conjunction with local redirection rules. This issue was fixed. HTTP Proxy Infrequently, the Proxy GUI in Barracuda NG Admin was not fed anymore with up-to-date status information due to an issue within the HTTP Proxy module. This issue was fixed.
Release and Migration Notes - Bugfixes Included with Barracuda NG Firewall 5.0.
Determine Your Update Scenario If you are going to update firmware version 4.2 to Barracuda NG Firewall 5.0.3, Barracuda Networks strongly recommends to study the instructions given in this chapter, as, under certain circumstances, no countermanding is possible once the updating process was initiated. Updating to Barracuda NG Firewall minor release 5.0.3 is only possible from release versions 4.2.x, 5.0, 5.0.1, or 5.0.2. Direct updating from release versions 4.0.x or 3.x is not possible. Update to 4.
Before beginning the updating process, you should clarify which types of hardware and administrative configuration you have. Barracuda NG Firewall 5.0.3 and its predecessors allow different administrative configurations.
Updating Unmanaged Units or NG Control Centers Updating Units or NG Control Centers Using SSH For speed reasons, Barracuda Networks recommends using this method of updating for all appliances in general, especially for those based on a flash drive or slower hardware. Step 1: Copy Before copying the package onto the unit as described below, make sure that there is no old minor release or patch package lurking within the /var/phion/packages/ directory. The directory must not contain any files.
Updating HA-Synced Units or HA-Synced NG Control Centers In the instructions below, the term "primary unit" refers to the unit used for regular operation, while "HA unit" refers to the secondary unit used as a failover system. For Firewall and Configuration HA synchronizing, the primary and the HA unit must both run at least firmware release versions between 4.2.11 and 5.0.3.
Proceed after having assured that the HA unit is fully functional. • Unblock the (standby) servers on the HA unit by clicking Stop Server within Control > Servers. • Log-in to the primary unit using Barracuda NG Admin. • Switch all servers from the primary to the HA unit and verify for correct operability. Therefore, Block all Servers on the primary unit. You may leave the primary unit in standby mode until correct operability of the HA unit has been verified.
Updating NG Control Center Managed Units To make use of the multi-release capabilities of Barracuda NG Control Center, all units within one cluster must run under the same software major release version. Migration of the NG CC configuration is only available for all units, servers and services of a cluster simultaneously. Step 1: Import the Update Package into the NG Control Center • Log-in to the Barracuda NG Control Center using Barracuda NG Admin.
No more interaction with the unit is necessary. Wait until the update is finished. Depending on the hardware, it will need from 15 minutes on the fastest appliances up to 60 minutes on the flash appliances. Take a look into the box log file at Box > Logs > Box\Release\update after the update process has been finished. In case of a not succeeded update please consult Box\Release\update_hotfix for a detailed log.
Migrating from phion netfence to Barracuda NG Firewall 5.0.3 Release version 5.0 of Barracuda NG Firewall was a switchpoint for customers that have been using phion netfence before. With release 5.0, phion netfence was replaced by Barracuda NG Firewall. Apart from the new features and a new interface design, the usage concepts and system architecture stay the same. If you are migrating from phion netfence 4.2.x to Barracuda NG Firewall 5.0.
Updating Standard Hardware from 4.2.x to 5.0.3 General Due to a kernel version change between 4.2.x and 5.0.3 (Linux kernel 2.4 was changed to Linux kernel 2.6), the enumeration of NICs may on some hardware sort the ethX devices in a different order, resulting in a loss of management access. Therefore, a procedure has now been implemented to rename the interfaces after upgrading to 5.0.3 to stay identically with the 4.2.x interface names.
Step 2: Generate the Mapping Data • Log-in to the unit via ssh as root and issue the following command: CreateMACMapping Running this program multiple times will do no harm. • Copy the output lines of the program beginning with CM and those beginning with CI to the clipboard. Step 3: Apply the Mapping Data • On standalone units, open the Box Network Configuration within Barracuda NG Admin.
