This guide primarily provides information on how to upgrade your Trellix IPS setup to the latest 10.1 release from the following versions:
- 9.1
- 9.2
Important Notes:
- Starting with this release,
Trellix IPS Manager should be registered with
Trellix. Skipping the Product Registration will disable the following functionalities:
- Manual and scheduled update of Signature Sets from the Manager
- Manual and scheduled update of Callback Detectors from the Manager
- Manual download of device software
- GAM Automatic Updating
After upgrading to 10.1, you will have to register the Manager/Central Manager.
- With this release, only SHA256 2048-bit certificate is used to validate communication between the Sensor and the Manager.
- After upgrading NS9500 standalone Sensor from 9.2 to 10.1, you must reassign the license to the sensor and push the SSL key to the Sensor.
- If you have any Managers and Sensors on 8.1 software, follow the steps below to upgrade:
- Upgrade the Manager to 9.1 or 9.2.
- Upgrade the Sensor to 9.1 or 9.2.
- Upgrade the Manager to 10.1.
- Upgrade the Sensor to 10.1.
Note
Due to infrastructure changes in the way NS-series Sensors store the SSL keys, the SSL certificate files have to be re-imported after upgrade.
- You must first purchase a license to enable proxy SSL decryption feature. To obtain a demo license for proxy SSL decryption, contact MB Licensing. An email containing the license will be sent from MB Licensing. If you are a first time user, you must register with your email ID and Grant number to log in to the Patches and Downloads portal. In the Service Portal, click Patches and Downloads to register and log in to the portal.
- The Trellix IPS 10.1 release is specific to the Central Manager, Manager, and NS-series Sensors.
- As with any upgrade, Trellix strongly recommends that you always first try the upgrade in a test environment.
- The current version of
10.1 Manager software can be used to configure and manage the following appliances:
- NS-series Sensors on 9.1, 9.2, and 10.1 software
- M-series, Mxx30-series and XC cluster 9.1
- NTBA Appliances (physical and virtual) on 9.1 software
Note
The 10.1 Sensor software images for M-series, Mxx30-series, and XC Cluster is not available. You can manage the 9.1 Sensor software version for M-series, Mxx-30 series, and XC Cluster 9.1 Sensors using Manager version 10.1.
- The upgrade involves the following phases that you must complete in the same order:
- If applicable, Trellix IPS Central Manager upgrade.
- Trellix IPS Manager upgrade.
- Trellix IPS NS-series Sensor software upgrade.
You need the following documents during the upgrade process:
- Trellix Intrusion Prevention System 10.1 Product Guide
It is also strongly recommended that you read the Release Notes for the associated product before you upgrade because this document makes references to several new features and enhancements.