Upgrading everyday security Commpact Instrukcja Użytkownika Pobierz pdf (Strona 49)

Procedure

1 After you update all the clusters in your infrastructure while upgrading to NSX logical switches (or

installing network virtualization components), a pop up message indicates that Firewall is ready to be

upgraded.

2 Click Upgrade.

After the upgrade is complete, the Firewall column displays Enabled.

3 Inspect each upgraded section and rule to ensure it works as intended.

What to do next

Once you upgrade firewall to NSX, you should move the grouping objects used by firewall rules to global

scope. To do this, use NSX APIs to create new grouping objects with the same members and then update the

relevant firewall rules with the new IDs.

Upgrade to NSX Edge

You can upgrade only from version vShield 5.5 to NSX Edge 6.0. If you have a prior version of vShield Edge

in your infrastructure, you must upgrade to version 5.5 before upgrading to version 6.0. For information on

upgrading to version 5.5, see vShield Installation and Upgrade Guide version 5.5.

Prerequisites

vShield Manager has been upgraded to NSX Manager.

Virtual wires have been upgraded to NSX Logical Switches.

System requirements for NSX Edge X-Large have been changed in NSX. See Chapter 2, “Preparing for

Installation,” on page 13.

Procedure

1 Log in to the vSphere Web Client.

2 Click Networking & Security and then click NSX Edges.

3 For each NSX Edge instance, select Upgrade Version from the Actions menu.

After the NSX Edge is upgraded successfully, the Version column displays 6.0.0 and Status displays

Deployed.

NSX Edge firewall rules do not support sourcePort, so version 5.5 Edge rules containing sourcePort are

modified during the upgrade as follows.

If there are no applications used in the rule, a service is created with protocol=any, port=any and

sourcePort=asDefinedInTheRule.

Chapter 6 Upgrade vShield 5.5 to NSX 6.0.x

VMware, Inc. 49

1 2 ... 44 45 46 47 48 49 50 51 52 53 54 ... 57 58

Brak uwag

Upgrading everyday security Commpact Instrukcja Użytkownika Strona 49