Upgrading from 6.315

jsnow · #1 (**permalink**) 02-08-2010, 02:34 PM

I need to upgrade from ASG 6.315. Will 7.502 be able to directly import my settings from the 6.315 backup file? Or do I need to upgrade first to an older version like 7.402?

Whity · #2 (**permalink**) 02-08-2010, 03:21 PM

It has an import option for V6 configurations, but don't know if that works for all version 6 configs. Or is 6.315 the latest update of version 6? Then it shouldn't be a problem anyway.

KSeemann · #3 (**permalink**) 02-08-2010, 04:03 PM

You should test the Import of the v6 Config in a v7 VM... That´s the best way to see what gets imported...

And it´s not much... (Quote from the "v6 Backup Import" Tab of the v7 WebAdmin)

Quote:

Because of some limitations in the conversion process when importing ASG Software V6 backups, you are advised to back up your current version 7 configuration prior to applying a converted backup of Astaro Security Gateway version 6.

The backup converter has the following limitations:

Only backups from 6.303 or later are supported.

HA configuration will not be converted.

Remote Syslog will not be converted.

Site-to-site and Remote Access VPN: Only PPTP settings will be converted.

Intrusion Prevention settings will not be converted.

Network and service groups: Groups containing other groups will be expanded.

Packet filter: QoS settings of packet filter rules will not be converted.

Interfaces: DHCP on Eth-VLAN is unsupported in V7.

Interfaces: Configured Ethernet aliases that are disabled will not be converted.

E-mail address fields (such as System >> Settings >> Administrator Contact) will not be converted.

HTTP proxy configuration will not be converted.

SMTP proxy configuration will not be converted.

Remote user authentication services will not be converted.

DHCP relay will not be converted.

Once you have restored an ASG V6 backup, please configure the missing items manually. Please carefully check your entire settings prior to putting Astaro Security Gateway into operation.

...and Plan your "Fallback Action" if the Update doesn´t work for some Reason... You can´t download a v6 Install ISO or v6 up2date Files any more!
EDIT: that means that you can´t just install a v6.300 ISO and reload your Backup, because the ASG needs to be the same or newer Version for a v6.315 Backup...

BAlfson · #4 (**permalink**) 02-08-2010, 04:29 PM

A little advice:

Don't bother transporting your blacklists and whitelists for Web and Mail Security. The new engines are much more powerful than those in V6. Typically, 'Sender blacklist', 'Expression filter' and 'URL block list' now are empty, but some of our clients have added several as it's hard to break old habits.

The new IPS is more-powerful and has an expanded ruleset. You should search in the V7.400 beta forum for lists of IPS rules you likely will want to disable.

V7.5 is a quantum leap beyond V6.3. There are many, new, powerful tools. A great thing to start with is the End User Portal. With it, you can give endusers the ability to manage their own email whitelists and quarantine, configure for any VPN for which they have permission and import the Astaro HTTPS cert if you want to turn on HTTPS scanning. It represents a tremendous reduction of the time an admin needs to spend managing issues for individual endusers.

Cheers - Bob