Upgrade engines locally

You can upgrade the engines on the engine command line.

Before you begin

Upgrading locally requires a physical connection to the engine using a monitor and keyboard or a serial cable.

CAUTION:
If McAfee Endpoint Intelligence Agent (McAfee EIA) is configured on the NGFW Engine when you upgrade to version 6.3 or later, the NGFW Engine node is returned to the initial configuration state and stops processing traffic. You must remove the McAfee Endpoint Intelligence Agent (McAfee EIA) configuration and refresh the policy before you upgrade to version 6.3 or later. For more information, see Knowledge Base article 14093.

During a Firewall Cluster or Master NGFW Engine cluster upgrade, the upgraded nodes can be online and operational side by side with the older version nodes. However, you must upgrade all nodes to the same version as soon as possible, as prolonged use with mismatched versions is not supported.

There are two ways to upgrade engines locally:
  • If the hardware has a DVD drive (a USB DVD drive can be used) and you have an installation DVD, you can upgrade from an installation DVD.
  • You can upgrade from a .zip file on a USB drive or on a DVD.