Sensor Software Upgrade: Manager Vs. Tftp Server; Sensor Software And Signature Set Upgrade Using Manager 6.0 - McAfee M-1250 - Network Security Platform Upgrade Manual

5 Performing Signature Set and Sensor Software upgrade
Updating Sensor software image
See also
Upgrading the Manager on page 3
Sensor upgrade requirements on page 43
Reviewing the upgrade considerations on page 44

Sensor software upgrade: Manager vs. TFTP server

As indicated in the previous section, the Sensor software can be updated either from the Manager or
via a TFTP server. While both the methods are supported, if the Sensors are deployed inline in your
production network, McAfee recommends updating the Sensor software using the Manager interface for a major upgrade (for
example, from 5.1 to 6.0)
A Sensor reboot is required whether you do an upgrade using TFTP or from the Manager.
When updating a Sensor from the Manager interface, both the Sensor software and the signature set
are bundled together and transferred to the Sensor. The Sensor updates its Sensor software image,
and saves the bundled signature set. When the sensor is rebooted, it deletes the old signature set,
and applies the saved signature set that was received along with the Sensor software image.
When updating a Sensor via TFTP, only the Sensor software is transferred to the Sensor. Once the
Sensor software update is complete, reboot the sensor. On reboot, the Sensor deletes the currently
loaded signature set, and contacts the Manager for the latest signature set. Until the sensor receives
the signature set from the Manager, the Sensor cannot process traffic and raise alerts.
There will be a Sensor downtime during the Sensor software upgrade process. The downtime is longer
in case of an upgrade using TFTP [vs. when upgraded using the Manager] due to the additional time
required to download the signature set.
Fail-open kits reduce the downtime impact of reboot considerably.
See the following sections:
• Sensor Software and Signature Set Upgrade using the Manager
• Sensor software upgrade using a TFTP server
See also
Sensor Software and Signature Set Upgrade using Manager 6.0 on page 46
Sensor software upgrade using a TFTP server on page 48

Sensor Software and Signature Set Upgrade using Manager 6.0

Task
1 If you have not already done so, download the latest signature set from the McAfee Network
Security Update Server (Update Server). From the Resource Tree, go to Manager | Update Server |
Signature Sets. See the Manager Server Configuration Guide for details. For a list of currently
supported protocols, see KB61036 at mysupport.mcafee.com.
Do not push the signature set to your Sensors at this point; it will be sent with the Sensor software
in Step 4.
46 McAfee Network Security Platform 6.1 Upgrade Guide
®