User manual SONICWALL AVENTAIL E-CLASS SRA EX-SERIES V10.0.2 UPGRADE GUIDE

[. . . ] Make sure that the Version number is one of the supported version numbers listed above. SonicWALL Aventail E-Class SRA EX-Series v10. 0. 2 Part number 232-001710-00_Rev_B Upgrade Guide Creating a MySonicWALL Account If you don't already have a MySonicWALL account, create one by completing an online registration: 1. In the User Login section, follow the link for users who are not yet registered. Enter your account information, personal information, and preferences, and then click Submit. SonicWALL will send a subscription code to the email address you entered in step 3. [. . . ] In the Available Software list, select the firmware item that corresponds to your appliance. You'll be prompted to download a file named <part number>_upgrade-<n>_<n>_<n>_<three-digit build number>. bin file to your local computer. Verifying the Downloaded Update File To make sure that the update was successfully transferred to your local computer, compare its checksum against the MD5 checksum information displayed on MySonicWALL. To verify the MD5 checksum of the upgrade file on a PC, use a Windows- or Java-based utility. Microsoft, for example, offers an unsupported command-line utility on their site named File Checksum Integrity Verifier (FCIV). At the DOS command prompt, type the following, which returns a checksum for the downloaded file: fciv <upgrade_filename>. bin 2. If they differ, try the download again and compare the resulting checksums. To verify the MD5 checksum directly on your SonicWALL Aventail appliance, type the following command, which returns a checksum for the downloaded file: md5sum <upgrade_filename>. bin Installing the Update This section outlines the process of updating your system. Note: Starting in v10. 0, you can no longer configure CA eTrust SiteMinder as an authentication server on the SonicWALL Aventail appliance. If your current configuration includes a SiteMinder server, remove it from your configuration before you back it up in preparation for installing the v10. 0. 2 update file, otherwise you will see an "Update failed" error message. Backing Up Your Current Configuration Before updating, it's a good idea to back up the current configuration data from your appliance using the export feature in AMC. A File Download dialog box prompts you to open the . aea file or save it to your hard drive. Note: On Windows operating systems, Internet Explorer may block the download of the . aea file. To work around this, click the information bar that appears beneath the Internet Explorer Address box, and then click Download File. Click Save, browse to the correct directory on your hard drive, and then save the . aea file. Click OK on the Export Configuration page to return to the Import/Export page. SonicWALL Aventail E-Class SRA EX-Series v10. 0. 2 Part number 232-001710-00_Rev_B 3 Upgrade Guide Installing the Update File Next, install the update using AMC: 1. If you have not already downloaded the update file (as described in "Obtaining the Update File from mySonicWALL. com"), click the mySonicWALL. com link and log in to download the appropriate update file to your local file system. This step may take several minutes, depending on the network connection speed. After the file upload process is complete, the update is automatically installed on the appliance. The appliance automatically restarts when the installation is complete. There are some known issues to be aware of before you start using the appliance: Connect Tunnel: If access to Connect Tunnel is enabled for an existing community, access continues to be granted in v10. 0. 2 after you update by virtue of a policy rule. However, if Connect Tunnel is not an explicitly allowed access method, the result of migrating to v10. 0. 2 is that users will be unable to access it. If this is an issue for your deployment, the way to fix this is to create a Connect Tunnel access rule. Session Details: If you upgrade your appliance and immediately begin using it, the Session Details page incorrectly indicates that some requests are being denied (for example, the rule summary might look like this: "Access to this destination has been rejected by an implicit deny all rule at the end of the Access Control list"). [. . . ] Here are a few situations in which importing a license is necessary: You have bought a new license. You are upgrading from a pre-v9. 0 version of the SonicWALL Aventail firmware; in this case you must obtain a new license and import it. The process for importing a license file is described in detail in the online help for the Aventail Management Console (AMC). From the main navigation menu in AMC, click General Settings, and then click Edit in the Licensing area. [. . . ]