Instructions to Apply the Service Pack

• If Firewall Analyzer has been installed as a root user in a Linux machine, continue with the below procedure logged in as a root user itself.
• Pre-requisite for context based Cisco Firewalls (Virtual Firewall): The Cisco Firewall IP address should be DNS resolvable from the Firewall Analyzer.

Follow steps 1 through 9 to apply the service pack. (for both Windows and Linux)

1. Shut down Firewall Analyzer server. (If Firewall Analyzer is running as a service, stop the service also)
2. Please wait for a few moments till the server/service terminates completely
3. Take a backup of the existing Firewall Analyzer database by creating a ZIP file of the contents of <Firewall Analyzer Home> /mysql/data directory and save it as mysql_backup.zip in the <Firewall Analyzer Home> directory.

Take a backup of the existing Firewall Analyzer MSSQL database Follow the steps given below:

• Find the current location of the data file and log file for the database firewall by using the following commands:

  use firewall go sp_helpfile go

• Detach the database by using the following commands:

  use master go sp_detach_db 'firewall' go

• Backup the data file and log file from the current location (<MSSQL Home>\data\firewall.mdf and <MSSQL Home>\data\firewall_log.LDF) to the new location (<New location>\firewall.mdf and <New Location>\firewall_log.LDF).
• Re-attach the database and point to the old location by using the following commands:

  use master go sp_attach_db 'firewall' , '<MSSQL Home>\data\firewall.mdf' , '<MSSQL Home>\data\firewall_log.LDF' go

• Execute the UpdateManager.bat (for Windows) or UpdateManager.sh (for Linux) file present in the <Firewall Analyzer Home>/bin directory.
• Click Browse and select the .PPM file that you have downloaded.
• Click Install to install the service pack. This may take several minutes depending on the amount of data that needs to be migrated, so please do not terminate the procedure prematurely.
• Wait until the service pack is fully installed.
• Click Close and then click Exit to exit the Update Manager tool.
• Start the Firewall Analyzer server.

Note: If you are trying to apply more than one service pack at a time, you need to restart the Firewall Analyzer Server after applying each service pack and check whether your data is intact in the web client. If you don't have any issues, follow the above steps for applying the other service pack. If you find any issues, do not continue applying the other service pack and contact Firewall Analyzer Support.

Log in to the Firewall Analyzer web client, and click the About link in the top pane. You will find the build number mentioned below the build version. This is the build number of the currently installed Firewall Analyzer.

You can contact Firewall Analyzer Support at any time for assistance in upgrading Firewall Analyzer to the latest build. Customers using build 6000 or 5000 or 4500_Beta or 4033 or 4031 or 4030 or 4023 or 4022 or 4021 or 4020 or 4012 or 4011 or 4010 or 4003 or 4002 or 4001 or 4000, please contact Firewall Analyzer Support to upgrade to the latest build.