Upgrading the Protector from Version 10.x to 10.y

This section explains the steps and procedure for performing a rolling upgrade and roll back for AWS EC2 protector. This method is useful for maintenance releases such as bug fixes and CVE updates. In this method, the protector is upgraded from version 10.x to version 10.y.

Before you begin

• Ensure that you have access to the EC2 instance with appropriate permissions. For more information about the required permissions, refer to the section Software Requirements.
• Ensure that the required security policy is available on the 10.y ESA.

Upgrading the Protector

Perform the following steps to upgrade the protector from 10.x to 10.y.

1. Install the 10.y AWS EC2 protector.

   For more information about installing the protector, refer to the section Installing the Protector.

2. Run test protect and unprotect operations and verify functionality.

For more information about running security operations, refer to the section Running Security Operations.

3. Validate the Audit logs on the ESA.

   a. Login to ESA and navigate to Audit Store > Dashboard.

   b. Navigate to Logs > Eventexplorer.

   c. Change the logs search to DQL.

   d. Refresh the page to sync up the logs.

   e. Verify that the logs for the security operations performed in step 10 are displayed.

4. If the 10.y deployment is working, then switch the production traffic to 10.y and monitor the traffic and auto scaling instance. If everything is working, then bring down the 10.x deployment by deleting the 10.x CloudFormation templates.

Rolling Back the Upgrade Procedure

Perform the following steps to roll back any failed upgrade procedure:

1. Ensure the 10.x deployment is running succesfully.

2. Ensure that the IP address of the 10.x service is updated in the hosts file or the Client configuration and switch traffic back to 10.x.

3. Delete the failing 10.y deployment by deleting the CloudFormation stack.