• New installation from scratch: We strongly recommend to re-install your Gibraltar from scratch. This will guarantee a proper and fully compatible system configuration.
• Partial migration: The following settings are automatically migrated when a Gibraltar appliance is first booted with version 3.0 and a configuration in old format is found: network settings, X.509 and SSH keys, certificates.
• Full manual upgrade by support: Please refer to our support for an individual offer. We will manually edit your current configuration to the new configuration format for Gibraltar 3.0.

1. Make sure that the patches “GibADMIN3.gib” and “update-system-v3.gib” are installed.
2. Save and export configuration of old version.
3. Check the size of the compact flash card currently installed in the Gibraltar Security Gateway. The size is shown at the register card “Upload CF image” when you press the link “Update” in the title bar. For migrating to Gibraltar 3.0, a minimum size of 1 GB is necessary. If your CF card is smaller, we will replace your CF card free of charge. In this case please contact our support.
4. Run an internal and external port scan to document the open ports from both sides.
5. Take screenshots of the web interface overviews to reconstruct the configuration, or use any other form of documenting current settings that allows to re-configure the firewall.
6. If you added users to the local LDAP server in the “Users” module, you may want to create a backup of the user database to rebuild it after the update:
• Stop the integrated LDAP server with
  “/etc/init.d/slapd stop”
  and backup the LDAP user database with
  “slapcat > [filename]”
• Copy the backup file to your desktop computer (with Linux use the command “scp” or with Microsoft Windows the tool “WinSCP”).
7. (only partial automatic upgrade): Make sure to avoid usage of underscores “_” in the names of the interfaces; “_” is not allowed within interface names. Change your interface names if necessary.
8. (upgrade by support): Replace all occurrences of host names in host aliases by IP addresses. Host names are not allowed within aliases any more.

1. Replace CF card or upload the new image file via web interface.
2. (only configuration from scratch): delete existing configuration on hard disk or CF card
3. (only partial automatic upgrade): make sure that old configuration file can be found by new version of Gibraltar (USB, hard disk, CF card).
4. (only upgrade by support): Copy new configuration sent by support to a USB stick and connect it to the appliance.
5. Restart the appliance.
6. Set new password.
7. Integrate the hard disk.
8. Restore the LDAP user database with
   "cat [filename] | slapadd -c”
9. Configuration of all necessary settings.
10. Upload new license file.
11. Save and backup configuration.

Precondition
We recommend to update your Gibraltar Firewall to version 2.5 using the instructions below before you proceed updating to version 2.6.

Please make sure, that the current configuration is saved on USB stick and download it additionally as a safe copy on your workstation computer. ("Configuration management" - "Save configuration" - "Download configuration").

Update CD:

• Download the file "gibraltar-2.6.iso.bz2" from www.gibraltar.at.

• Extract the file "gibraltar-2.6.iso" and burn it to a CD ROM.
• Reboot Gibraltar with the new CD ROM.
  

Update CF (Gibraltar Security Gateways):

• Download the file "gibraltar-appliance-2.6.1.tgz" from www.gibraltar.at.
• Upload this file in your webinterface ("Update" - "Upload CF-image").
• After the successful upload you can recognize the following message: "Uploaded new CF image successfully! Save configuration and reboot!"
• Save the configuration and reboot the GSG.

After the update
Log on to your webinterface. This will start a context based update mechanism that completes some entries. Save the configuration after the successful login.

Please make sure, that the actually configuration is saved on USB stick and download it additionally as a safe copy on your workstation computer. ("Configuration management" - "Save configuration" - "Download configuration").

To use all new features of the version 2.5 you have to request a new license at This e-mail address is being protected from spam bots, you need JavaScript enabled to view it .

Update CD:

• Download the file "gibraltar-2.5.iso.bz2" from www.gibraltar.at.
• Extract the file "gibraltar-2.5.iso" and burn it to a CD ROM.
• Reboot Gibraltar with the new CD ROM.
  

Update GSG400
If you are using a GSG400 you have to deactivate the watchdog for the webinterface as follows:

• Log into your GSG400 with the program "putty".
• Enter the following command "fte /etc/cron.d/jetty-watchdog".
• Insert a "#" before the line that begins with "*/2".
• Press "Alt X" and save the file.
• Now you can update your GSG400 via webinterface.

Update CF (Gibraltar Security Gateways):

• Download the file "gibraltar-appliance-2.5.tgz" from www.gibraltar.at.
• Upload this file in your webinterface ("Update" - "Upload CF-image").
• After the successful upload you can recognize the following message: "Uploaded new CF image successfully! Save configuration and reboot!"
• Save the configuration and reboot the GSG.

After the update
Log on to your webinterface. This will start a context based update mechanism that completes some entries. Save the configuration after the successful login.

User migration
Gibraltar 2.5 has a new LDAP-based user management. Therefore the update process has to transfer existing users into LDAP. It is not possible to maintain all users passwords - HTTP- and SMTP passwords will get lost during this process. Gibraltar will generate random passwords for these users. You can see the result of the migration process in ("Configuration management" - "Save configuration" - "Download migrated users").

Please make sure, that the actually configuration is saved on USB stick and download it additionally as a safe copy on your workstation computer. (admin configuration - save configuration - button download configuration).

Make an update: Start your firewall with the new CD and Gibraltar start automatically with the update-routines. After the successful start please register in the webinterface. So the update process is completed.
The update is completed and your Gibraltar firewall is on the status quo.

Some particularities:

If you have configured Gibraltar already in a version before 2.3 and you have integrated the hard disk, you should accomplish the integration from the main disk with Gibraltar 2.4.1 once more. Please action as follows:

• Change to the register sheet to integrate the hard disk (System - configure hard disk)
• Choose the empty row in selection menu
• Click the button Save
• Save the configuration on USB stick. Please attend, that you are not saving now on hard disk, otherwise the configuration will be lost.
• Upload the file gibraltar-2.4.1.tgz at the update link in the title bar 
• Restart Gibraltar
• Include the hard disk after restart
• Safe the configuration
• Restart once more
• Ready!