Software upgrades

The FireBrick automatically checks if there are any software upgrades available and shows this on the main page when you log in.

If there is an Upgrade link next to the Software version, select this and you will be shown the upgrade options including a one-click download, install and re-boot option.

You can also download any software upgrades from the web site and upload these to your FireBrick manually if you prefer, or if you do not have internet connectivity or DNS resolution on the FireBrick in question.

Automatic upgrades

The system object in the configuration has two parameters which control automatic software upgrades.

sw-update: specifies which type of software should be considered for automatic upgrade. Setting none stops any automatic upgrade. If there is a new version of the level specified in sw-update then the FireBrick automatically downloads the new version, installs it and reboots.
sw-update-profile: specifies a profile which could, for example, be a specific time of day, such as 2am to 3am. The profile restricts all checks on software updates to the times when the profile is active. This can be useful to ensure any updates are only done at convenient times.

Alpha and beta releases

There are several types of release that are done.

alpha released are issued quite often, sometimes several times a day, with new features and experimental features.
beta releases are issued when we have reached a milestone in the development and have what we believe to be a safe stable release.
factory releases are a previous beta release that is promoted to be a factory release at a later date after some extensive testing in the field.

Normally a FireBrick can only load beta and factory releases. Automatic upgrades are normally only to new factory releases. However, if you are interested in trying new releases more often, we can enable alpha releases on your FireBrick - contact your dealer to arrange this. Obviously alpha releases have more change of having bugs in them.

How it works

The FireBrick checks for new software periodically when the sw-update-profile allows, and also when you go to the main control web pages. This allows it to show that there is new software available, and eventually to send alerts to tell you new software is available.

The process also allows any upgrades to the FireBrick (such as upgrading to a fully loaded model) to be picked up automatically. Some upgrades will need a reboot / power cycle to take full effect though.

The system works using DNS, so you have to have a DNS resolver of some sort available, either by the services/dns object or from DHCP or PPP or RA. A single DNS query provides details of all software updates expected.

Intermediate updates

From time to time we issue software which incorporates major changes to the configuration. When upgrading to a newer version you have to upgrade to this checkpoint release first. The upgrade offered on the web pages will be the next checkpoint release. When you have upgraded to this, the later upgrade may then be offered.

Automatic upgrades always go via these checkpoint releases.

Database records

Obviously FireBrick Ltd have a database record for every FireBrick made. This carries the key information about the FireBrick, manufacturing date, factory testing information, and so on. It also holds details of whether it is fully loaded or basic model and any other options. When the software update check is done, this record is also checked for changes and these are updated automatically.

This means if you order an upgrade to your FireBrick, e.g. to fully loaded then the brick will pick this up automatically, usually within a day. A restart is not normally needed, but some features may not work until restarted (e.g. BGP).

If you have a FireBrick support contract then details of the support contract are also held. The database also holds details of the version number your FireBrick has when it last checked.

Product marking

It is possible for your dealer to update the database record with your company name and a label for your FireBrick if you wish, and this is shown on the FireBrick status web page even if the FireBrick is factory reset. This is basic product marking feature which some customers find useful. Contact your dealer if you would like this to be set or changed. You can, for example, use your company asset number as a label.

If you have an FB6000 series FireBrick then these details are requested when you order and the label is actually engraved on the front of the product as well. Obviously this cannot be changed remotely, but a new front can be ordered for a small fee if you need.

FireBrick 2700 series

FireBrick - Firewalls, Bonding ADSL, Routers, Traffic Shaping...