What are the best practices for upgrading a Symantec Brightmail Gateway Appliance to its latest software version?
Preparing for the Upgrade
Reducing Control Center data before the upgrade
The upgrade process might be lengthy if you have large data sources in the Control Center such as:
Messages in the spam quarantine
Messages in the Content Incident folders
Reports data storage
It is recommended to clear as much data as you can before upgrading to make the process smoother as well as reducing the backup size before the upgrade.
Backing up Symantec Brightmail Gateway before the upgrade
Symantec recommends backing up the current version before moving to any new release before proceeding with the upgrade.
NOTE: Backups can only be restored back to the same version. (eg: If you made a backup of a Symantec Messaging Gateway running version 10.5.3-4, you must be using 10.5.3-4 to restore the backup). Make sure you have the ISO available with the current version in the event that you need to rollback.
To make a backup of the current version:
Login to the Control Center Navigate to Administration -> Version Click Backup Now Select Full Backup Select where to save the backup (On the Control Center OR an FTP server)
NOTE: Symantec recommends saving the backup to a remote location such as an FTP server. If that is not available you can still save the backup local in the Control Center and then download it from the interface later by navigating to Administration ->Version -> Restore/Download
Prepare for Rollback
In the event of a failed upgrade, we recommend having on hand:
This allows you to OS Restore to the previous version, restore the backup and getting back up as quickly as possible.
Performing the upgrade
NOTE: For determining whether to update the Control Center or Scanners first, please see the Release notes or Software Update notes for the version you are updating to. These can be acquired by clicking the "View Description" button on the Updates page of the Symantec Messaging Gateway user interface, or going to the following link and getting the proper document: https://support.symantec.com/bin/unifiedweb/productLandingServlet?prodRefKey=53991
1. Download the latest updates from the Control Center
Navigate to Administration -> Version -> Updates -> Select the host from the drop-down ->Select the version -> Download Only
2. Configure the Symantec Messaging Gateway Scanner(s) to NOT accept incoming mail:
Navigate to Administration -> Configuration -> Click the Host Click “Do not accept incoming messages” Click SAVE
Ensure that all deliverable mail has been cleared from the Delivery queue.
Navigate to Status -> Message Queues On the right hand side: Change the queue to “Delivery”, list to “All” and click Display Filtered
4. Start the upgrade
Navigate to Administration -> Version -> Updates -> Select the host from the drop-down -> Select the version -> Click Install
5. Wait until the upgrade finishes and the appliance reboots then go to step (6)
6. Configure the Scanner(s) to accept and deliver mail normally
Navigate to Administration -> Configuration -> Click the Host Click “Accept and deliver messages normally” Click SAVE
7. Test mail delivery and spam detection.
Please check the following KB if you need assistance on this step: