Upgrading your appliance

You can upgrade your NDR appliance to the latest software release using the Web UI, API, CLI, or shell. Be sure to verify the current release of your NDR software before upgrading your appliance software. Follow the steps in this section to upgrade your NDR appliance to the latest software version.

Important
Contact Trellix Customer Support to request access to the software release image.

Important
The TrellixNetwork Detection and ResponseADD Software Release appliance will automatically reboot after the upgrade. Allow for the appliance to finish rebooting before use.

Important
Upgrade the cluster master and data nodes simultaneously. After the cluster master and data nodes are upgraded, then perform the upgrade on the NDR director node.

Upgrading your appliance using the Web UI

Log in to the NDR appliance Web UI.
Click the Manage menu and select Software Update.
Click the MANAGE SOFTWARE button to open the Upload Software window.
Click CHOOSE FILE to upload the .iso or .fe software image file you received from Trellix Customer Support.
Click the UPLOAD button to upload the software image to your NDR appliance.
Click All Appliances to see a list of connected NDR appliances and select the appliances you want to upgrade.
Click SOFTWARE UPDATE to open the software update window.
Click the NDR software drop-down arrow and select the NDR software image you uploaded in step 4 and step 5.
Click Update to upgrade your selected NDR appliances with the latest software image.

Upgrading your appliance using the API

Important
When using the API to upgrade your NDR data nodes connected to an NDR master node, upgrade the master node only. After the master node upgrade is complete, each data node receives the software upgrade from the master node automatically.

Enter the following cURL command to upload the NDR image to your NDR appliance using the API:
curl -X POST -u <username:passwd> -k -F "update=@/path/to/updates/file" https://<NDR_Address>/updates/v1
Verify that the NDR image is uploaded:
curl -u <username:passwd> -k https://<NDR_Address>/updates/v1
Enter the following cURL command to apply the NDR upgrade:
curl -X POST -u <username:passwd> -k https://<NDR_Address>/updates/v1/IA1.5.0.xxxxx/apply

Upgrading your appliance using the CLI

Follow these steps to upgrade your NDR appliance to software version using the CLI.

Important
Installing the current release upgrade will automatically reboot the NDR at completion. Packet capture is interrupted during the upgrade.

Using an SCP client, transfer the software image to /home/npscp/transfer and verify the md5sum.
scp IA-1.5.0.xxxxx.fe /home/npscp/transfer
Log in to the NDR and enter the shell.
In the CLI, enter configure system and then upgrade. The upgrade window opens.
Select the listed update file which is NDR-1.5.0xxxxx and confirm the selection. The upgrade is installed and the NDR appliance restarts.

Synchronizing NDR and PX

Important
Only synchronize the Packet Capture and NDR appliances if network configuration settings have been changed between upgrades.

On the NDR appliance, log into the CLI.
Enter privileged mode:
hostname > enable
Enter the password:
hostname # password
Enter configuration mode:
hostname # configure system
Enter the metadata menu:
hostname (config) # metadata
Select H to synchronize the NDR network configuration with the Packet Capture appliance.
Select Q to quit.