Updating Policy Server and Network Sensor

You can update the Policy Server and Sensor through the WEBUI or CLI.

Note

For Genians Cloud Managed Edition the Policy Server, will update automatically. Network Sensor upgrades must be manually initiated.

Update the Policy Server and Sensor Automatically

  1. Go to System in the top panel

  2. Go to Update > Genian Software in the left System Management panel.

  3. Find Available Version software in Genian Software window. Click Update from Genian Cloud

  4. Select either Download Only retrieve the update and install manually, or Download and Apply to automate the installation to all eligible components.

    • If choosing Download Only: See steps 7-13 under "Update the Policy Server and Sensor Manually"

Update the Policy Server and Sensor Manually

This is done by obtaining Genian NAC Software from Genians and storing it locally on your machine to then upload onto the servers.

Prepare System Files for upload

  1. Extract contents from the .iso file.
  2. Select desired software version from the /images directory in the .iso.
    • For Policy Server, select file beginning with NAC-CT (Includes network sensor files)
    • For Network Sensor, select file beginning with NAC-SS

Update the Policy Server and Sensor by WEBUI

  1. Go to System in the top panel
  2. Find Update section in the left System Management panel. Go to Genian Software
  3. Find and click Upload File button in Genian Software window
  4. Click Select File in Upload window
  5. Locate Genian Software in File Upload window. Double click on desired file
  6. Click Upload
  7. Go to System in the top panel
  8. Go to System > System in the left System Management panel
  9. Find Policy Server/Sensor in System window. Click Checkbox
  10. Click Tasks
  11. Click Update Specific System Image (If you selected Policy Server and ALL sensors in Step 9, Click Update Latest System Images)
  12. Enable or Disable Database Backup before upgrade.
  13. System will automatically update and reboot.

Update the Policy Server and Sensor by CLI(Command Line Interface)

Genian NAC provides updates to policy servers and network sensors through the CLI.

Genians highly recommends CLI upgrades for following case:
  • Upgrade server separately, such a Policy server or DB server
  • HA configuration

CLI update Command : geniup

Command Option
  • -h : help
  • -f [image filename] : Update software image from file
  • -u [URL] : Specify image URL
  • -d : Allow downgrade
  • -c : Don't check image validation (Package, Owner)

  1. Connect SSH with terminal emulator that supports Zmodem.

  2. Use command rz and upload an image file on server.

    Genians$ cd /tmp
Genians$ rz

  3. Use geniup command and options to proceed with the upgrade.

    Genians$ geniup -cf [image filename]
System software upgrade from
Current Version :
Target Version  :
Do you want to upgrade this target version ? (y/N):
Do you want to backup current database ? (Y/n):
Do you want to restart system after upgrade ? (Y/n):

For the details, please check the Command Line Interface documents.

Warning

Genians highly recommends a backup be completed prior to performing a CLI upgrade.

Upgrade methods by Configuration

How to upgrade Policy Server/Network Sensor

Different version of policy server and network sensor may cause abnormal operation. Please upgrade both server to the same version.

  1. Access shell mode by typing @shell

  2. Stop Policy server service.

    Genians$ alder stop

  3. Upgrade Policy server (Don't reboot policy server).

  4. Upgrade Network sensor.

  5. Reboot Policy server.

How to upgrade Individual Policy Server/DB Server

The DB Server should not be upgraded during the Policy server upgrade process.

  1. Access to shell mode.

  2. Stop Policy server service.

    Genians$ alder stop

  3. Upgrade DB server.

  4. Reboot DBserver.

  5. Upgrade Policy server.

Note

The policy server and the DB server do not necessarily have to be the same version. Please refer to the release note and check the DB server revision before performing an upgrade.

How to upgrade HA configuration

The Master system should not be changed during the upgrade process.

  1. Upgrade Slave server (Don't reboot policy server).

  2. Stop Slave server service

    Genians$ alder stop

  3. Upgrade Master server

  4. Reboot Master server

  5. Reboot Slave server