Refer to knowledge base article, How to Upgrade On-Prem Network Security Manager firmware for detailed instructions on upgrading NSM firmware using SWI files.
Capacity Requirements: The capacity requirements for an NSM On-Premises deployment have changed:
| Platform | Platform Details |
|---|---|
| VMware |
Supported versions: ESXi 7.0, 8.0 |
| Hyper-V | Windows 2019, 2022 |
| KVM | Linux Kernel 5.15 LTS |
| Azure |
Standard_D4_v2 Standard_D5_v2 Standard_D16as_v5 Standard_D8as_v5 |
| Number of Firewalls | CPU (Cores) |
|---|---|
| 100 | 4 |
| 150 | 4 |
| 250 | 8 |
| 500 | 8 |
| 750 | 8 |
| 1000 | 8 |
| 1000+ | 16 |
| Number of Firewalls | CPU (Cores) | RAM (GB) |
|---|---|---|
| 100 | 4 | 16 |
| 150 | 4 | 16 |
| 250 | 8 | 16 |
| 500 | 8 | 16 |
| 750 | 8 | 16 |
| 1000 | 8 | 16 |
| 1000+ | 16 | 32 |
| Number of Firewalls | CPU (Cores) | RAM (GB) |
|---|---|---|
| 100 | 4 | 24 |
| 150 | 4 | 24 |
| 250 | 8 | 24 |
| 500 | 8 | 32 |
| 750 | 8 | 32 |
| 1000 | 8 | 32 |
| 1000+ | 16 | 64 |
| Number of Firewalls | Data Retention 7 days | Data Retention 365 days |
|---|---|---|
| 50 | 600 GB | 750 GB |
| 100 | 1.2 TB | 1.5 TB |
| 150 | 1.7 TB | 2.3 TB |
| 250 | 2.8 TB | 4 TB |
| Number of Firewalls | NSM Nodes |
|---|---|
| ≤ 250 | NSM Controller Node / Single Node Deployment |
| > 250 | Controller Node + 1 Reporting Agent per 250 firewall |
| Reporting Agent resource requirements (CPU and RAM ) is the same as the controller node. | |
Upgrade Instructions:
| Current Build | Upgrade Path to 3.1.0 On-Prem |
|---|---|
| NSM 2.6.0 HF1 | NSM 2.6.0 HF1 > NSM 3.1.0 |
| NSM 3.0.0 | NSM 3.0.0 > NSM 3.1.0 |
| MSM 3.0.1 | NSM 3.0.1 > NSM 3.1.0 |
Improvement in firewall firmware upgrade:
NSM On-Prem Upgrade Improvements: Now, NSM user can utilize system console upgrade method to upgrade to multiple versions of NSM by specifying right channel name.
| Issue ID | Description |
|---|---|
| NSM-26461 | All Firewalls managed by the HA NSM system were deleted without interaction from the admin. Now, the issue has been resolved. |
| NSM-28294 | Resolved the issue in showing the file upload and scanning history data on the Firewall View | Home > Dashboard > Capture ATP dashboard. |
| NSM-28989 | Fixed the issue in showing data on Firewall View | Policy > Capture ATP > Scanning History page when the slider set to Last 24 hours, Last Week, or Last Month. |
| NSM-29677 | Resolved the data representation issue on the Firewall View | Monitor > VPN Activity Report > Dashboard. |
| NSM-29702 | Resolved the issue in scheduling the Backup according to the backup date or day selected in the schedule. |
| NSM-29792 | Resolved the issue where alerts generated from the Rules configured under the Firewall View | Monitor > Alerts & Notifications > Rules page would disappear upon refreshing on the Firewall View | Monitor > Alerts & Notifications > History page. |
| NSM-29817 | Resolved an issue that prevents exporting the device inventory data as a .CSV file from the Manager View | Home > Firewalls > Inventory page. |
| NSM-29912 | Resolved the issue in accessing the Template View > Settings > Time page of a newly added template. |
| NSM-30707 | Fixed an issue of not showing the Tags attribute under the Grid settings options on the Manager View | Home > Firewalls > Inventory page. |
| NSM-30708 | Commit errors were seen when an NSM admin configures a user with @ in the name field on the Firewall View | Device > Users > Local Users & Groups page for Gen 6 devices. Now, the issue has been resolved. |
| NSM-30869 | The unit locally changed event, with the firewall device going to out-of-sync status, was not occurring while the firewall's GMS/NSM config was using NSM Private IP instead of Public IP. Now, the issue has been resolved. |
| NSM-31036 | Resolved the issue of getting the Agent deregistered from the Controller while upgrading. |
| NSM-31209 | Resolved the issue of getting the Controller and Agent deregistered from a distributed setup after the upgrade. |
| Issue ID | Description |
|---|---|
| NSM-31223 | After upgrade, login to NSM Agent in Safemode is not working. |
NSM-31255, NSM-30892, NSM-30748, NSM-30663, NSM-30208, NSM-30198, NSM-30044, NSM-29386