Offline Updates for Environments with no Internet Access
Introduction
Skyhigh Security Web Gateway offers support for offline updates which allow the administrator to create, download, and apply full update packages (vs. incremental updates) that can be applied manually with the use of portable media.
This can be very useful for appliances that are part of closed/isolated network which aren't able to connect to the normal Skyhigh Security update servers, or for customers that would like to test the use of an update before applying it.
These updates apply to the Antimalware engine, URL filter, Data Loss Prevention, Dynamic Content Classification, Application Control, Single Sign On services, and 3rd party Avira Antivirus. This process does not update the Skyhigh Security Web Gateway version itself.
Considerations
As offline update packages are version and build specific, be sure to verify this information prior to building the package. Failure to do so will result in a coordinator error message, wasted time, and the user needing to generate the update package again with the correct version and build numbers.
You must have an active licensed product in order to generate and apply offline updates.
Though update packages are version and build specific you always have the option of reverting back to a previous update version if you choose. Example: URL filtering version 41291 can be reverted back to version 41189, and so on.
If you need additional assistance with any of the following steps please do not hesitate to call Skyhigh Security Web Gateway support.
Locating software Version and Build number
Before attempting to build an update package you will need to locate the software version and build number as packages are specific to these numbers. This information can be verified by logging into the GUI of the appliance.
Offline Update URL
Access the following URL: https://contentsecurity.skyhigh.cloud/update
Creating the update package
Generating an update package will take the user through a series of steps ultimately creating the .upd package to be applied.
Step 1: Terms and Conditions
Accept the terms and conditions and click Next Step.
Step 2: Selecting the correct Skyhigh Security Product
Skyhigh Security offers offline updates for other products, be sure to select the correct Skyhigh Security product - Skyhigh Security Web Gateway is shown in this example.
Step 3: Version and Build
Before attempting to build an update package you will need to locate the software version and build number as packages are specific to these numbers. This information can be verified by logging into the GUI of the appliance, referenced in the screenshot above.
Step 4: Select the features you want to update
After entering the Version and Build numbers select what should be included in the update package. Once the selections have been made click generate package. This will bring up another dialog box showing the progress of the update package.
Step 5: Generating the Update package
The amount of time it takes to generate the update package will be determined by the options selected and overall file size.
Step 6: Downloading the Update Package
Once the offline update package is generated you will be prompted to download the .upd file to a specific location. It is recommended that the file be saved to mobile media such as USB. Download time will be determined by overall file size of the update package. Example: Features included in the update.
Applying the Update Package
For uploading the update package file you will need to be logged in the GUI of the appliance. Configuration > [Appliance name] > Update Engines > Upload Update File...
This will bring up another dialog box where you can browse to the downloaded .upd file.
Once the .upd file is located click update - this will apply the update to the appliance and show the overall process. It will display "Update finished" once its completed. Click close.
Verifying Success
Verifying the version and date of last applied update can be done by viewing the information in the Charts and Tables section of the dashboard data. Dashboard > Charts and Tables.
Common Questions
Question: Is it possible to import older update packages (downgrading versions)?
Answer: Yes. Just follow the same process as outlined above using a previously downloaded offline update package. Keep in mind that Skyhigh Security will not keep older versions on its servers.