Refer to knowledge base article, How to Upgrade On-Prem Network Security Manager firmware for detailed instructions on upgrading NSM firmware using SWI files.
You need to create a system backup of NSM On-Prem 2.4.0 before upgrading to version 2.4.4 because NSM backups before the NSM 2.4.0 version cannot be restored in the 2.4.4 version.
NSM On-Prem supports importing backup file of size upto 20 GB. To keep backup file size in control we recommend to delete device firmware image used for upgrading individual firewalls from Home > Firewalls > Inventory > Action > Upgrade firmware upgrade.
NSM On-Prem 2.4.4 can manage firewalls running SonicOS version 7.1.1 or below only.
| Platform | Platform Details | Number of Firewalls | Recommended Configuration |
|---|---|---|---|
| VMware | Supported versions: ESXi 7.0, 8.0 | 1-500 500-3000 | 4 Cores, 24 GB RAM 8 Cores, 48 GB RAM |
| Hyper-V | Windows 2019, 2022 | 1-500 500-3000 | 4 Cores, 24 GB RAM 8 Cores, 48 GB RAM |
| KVM | Linux Kernel 5.15 LTS | 1-500 500-3000 | 4 Cores, 24 GB RAM 8 Cores, 48 GB RAM |
| Azure | Standard_D4_v2 Standard_D5_v2 | 1-500 500-3000 | 8 Cores, 28 GiB RAM 16 Cores, 56 GiB RAM |
Upgrade Instructions:
NSM can be upgraded on platforms VMWare, Hyper-V, KVM and Azure using system update or .swi image. You must be at the correct version of NSM before upgrading to NSM 2.4.4. Refer to the table below before attempting to upgrade to NSM 2.4.4.
| Current Build | Upgrade Path to 2.4.4-R7 |
|---|---|
| NSM 2.3.5-1-R30 | 2.3.5-1-R30 > 2.4.0-R32 > 2.4.4-R7 |
| NSM 2.4.0-R32 | 2.4.0-R32 > 2.4.4-R7 |
| NSM 2.4.4-R4 | 2.4.4-R4 > 2.4.4-R7 |
This maintenance release provides fixes for previously reported issues.
| Issue ID | Description |
|---|---|
| NSM-25572 | There is no Event log or Email alert for "Firmware upgrade successful" message in On-Prem. |
| NSM-25225 | Upgrading NSM On-Prem to version 2.4.4 causes the device to lose registration and prevents re-registration. |
| NSM-24927 | A security regression CVE-2024-6387. |
| NSM-24648 | There is an issue in the checkbox to select all devices in firewall schedule backup. |
| NSM-24643 | Incorrect data is showing on NSM firewall address objects list. |
| NSM-24639 | Guided wizard displayed for first time user login does not close on hitting 'x' button, even after multiple attempts. |
| NSM-24504 | Sort by IP Address column is not working on Inventory page. |
| NSM-24286 | Golden Template objects fail with "Schema validation error: property 'range' redefined" error message. |
| NSM-24251 | Previous job status is not correct for EXP schedule backup. |
| NSM-23947 | 'Set time automatically using NTP' reverts to disable. |
| NSM-23905 | Backup file exported from NSM Web interface in normal mode does not have .enc suffix. |
| NSM-23477 | Group Firmware upgrade failed for NSV in batch of 10 firewalls. |
| Issue ID | Description |
|---|---|
| NSM-25647 | Azure upgrade to NSM 2.4.4-R7 fails from NSM 2.4.4-R4. This is an intermittent issue observed only in the Azure environment when upgrading from the NSM 2.4.4-R4 release. Workaround: Please take a backup of NSM 2.4.4-R4 and restore it in a fresh installation of NSM 2.4.4-R7. |
| NSM-25606 | NSM 2.4.4-R7 swi upgrade in normal mode throws an error 'No response' in Hyper-V 2019. Workaround: Please use the safemode for upgrade. |
| NSM-25431 | System > Firmware Upgrade > Import/Export Settings: "Request failed status code 400" error is observed while trying to restore the settings. Workaround: Please use backup created in NSM 2.4.0 for restore. |
| NSM-25247 | Firewalls on SonicOS 7.1.2 firmware in NSM have acquisition failure with error "Acquisition Failed, Internal Server Error". |
| NSM-24878 | NSM randomly becomes non-responsive and requires reboot of Primary and Secondary NSM servers to restore. |
| NSM-24566 | For Hyper-V deployments, Static On-Prem setup becomes DHCP enabled, once safe mode is turned off. |
NSM-24528, NSM-24516, NSM-24450, NSM-24285, NSM-24281, NSM-23870.