Upgrading Firmware Using Netflash; Troubleshooting Windows Netflash Upgrades - McAfee SG310 Administration Manual

Upgrading firmware

Upgrading firmware using Netflash

You can also use the UTM Firewall Management Console to erase the settings for the current configuration
and restore the default configuration settings. See
Upgrading firmware using Netflash
Use this procedure to upgrade your firmware using the Windows Netflash.exe utility if your appliance is
running a firmware version prior to 2.1.0. Once the appliance is upgraded to version 2.1.0 or higher, you
can use the Management Console to upgrade firmware directly using HTTP. The fastest and easiest method
of upgrading is using HTTP. For more information, see
Netflash.exe is a Windows program that automates the upgrade procedure. Be sure to read the onscreen
release notes before you attempt the upgrade.
From versions 3.1.0 of the firmware onward, a Netflash upgrade requires two files: the Netflash executable
and the firmware image (.sgu) appropriate for your appliance. Prior to 3.1.0, the .sgu was bundled into the
Netflash Windows executable, which required a separate Netflash.exe for each appliance. Once you have
downloaded the current Netflash.exe file, there will rarely be a need to obtain an updated Netflash
executable. Post 3.1.0 firmware does not modify the Netflash.exe utility with every firmware release. The
files are available in the \images directory of the UTM Firewall CD that shipped with your appliance, or can
be downloaded from my.securecomputing.com.
Note: This procedure is not for unresponsive appliances (no Heartbeat or H/B light). Refer to the recovery
procedure if that is the case. See
Attach the UTM Firewall appliance's LAN port or switch directly to your PC using a straight cable.
1
Login to your PC with administrator privileges (2000/XP/NT4 only).
2
Ensure there are no DHCP server programs or services (Start > Run > Open: services.msc) running on
3
your PC.
Disable the built-in Windows firewall (Control Panel > Windows Firewall > Off), and any third party
4
firewall or antivirus software.
Double-click the Netflash icon to launch it.
5
Click Start Upgrade. Follow the prompts to complete the upgrade. When prompted, select the
6
appropriate firmware image file (.sgu).
If you experience any difficulty with the upgrade, refer to

Troubleshooting Windows Netflash upgrades

At each step in the upgrade process, there are situations that may result in the Windows Netflash utility not
operating correctly. The potential conflicts at each stage of the upgrade process are:
Locating the UTM Firewall unit on the network – The Netflash utility performs a broadcast ping and
1
listens for replies. It then looks at the MAC addresses that replied and, from these addresses, identifies
the UTM Firewall devices on the network. If multiple units are found, you are prompted to select the IP
address of the devices you wish to upgrade. Auto detect may fail in the following situations:
• You changed any of the first 6 HEX digits on the LAN MAC address. To resolve the issue, enter the unit's
IP address manually. If you have any other UTM Firewall devices on the network, either remove them
or attach your PC directly to the device's (the one you wish to upgrade) LAN port using a crossover
cable. If you fail to do this, another device will be auto detected and you will not be prompted to
manually enter an IP address.
• The device you want to upgrade is on a different subnet than your PC. In this case, the broadcast ping
will not reach it.
• Your PC is separated from the device you wish to upgrade by network hardware (such as a router) that
is not forwarding broadcasts.
378 McAfee UTM Firewall 4.0.4 Administration Guide
Erasing configuration and
Upgrading flash firmware via
Recovery using Netflash.
rebooting.
Troubleshooting Windows Netflash
HTTP.
upgrades.