Blue Coat Systems Proxy SG SGOS 4.x ユーザーズマニュアル
Blue Coat SGOS 4.x Upgrade Guide
8
Summary of Changes to the Upgrade Process
•
The upgrade path must include a system that shows all possible deprecation warnings, so that
these can be corrected in advance of the upgrade, to avoid policy compilation failures after
upgrading. Migrating through SGOS 3.2.4 or greater satisfies this requirement.
these can be corrected in advance of the upgrade, to avoid policy compilation failures after
upgrading. Migrating through SGOS 3.2.4 or greater satisfies this requirement.
•
If the currently installed policy issued deprecation warnings when compiled, downloads of
systems in which that syntax has been abandoned will fail with the error " ". Which error
message you see depends on whether you were using the Management Console or the CLI.
systems in which that syntax has been abandoned will fail with the error " ". Which error
message you see depends on whether you were using the Management Console or the CLI.
From the Management Console:
Policy deprecation warnings exist. Please resolve them prior to upgrading to the next major release of
system software
system software
From the CLI:
WARNING: The installed policy contains deprecation warnings. Please fix these
warnings prior to upgrading to the next major release, or use load upgrade
ignore-warnings at your own risk. Upgrading to the next major release with
deprecation warnings will cause the policy compilation to fail on boot.
This means that you cannot download major version upgrades while policy contains deprecated
syntax.
syntax.
Generally, the deprecation warnings indicate the appropriate corrective action. See "Policy
Deprecation" on page 22 for instructions on how to view the deprecation warnings that indicate
the syntax to be corrected.
Deprecation" on page 22 for instructions on how to view the deprecation warnings that indicate
the syntax to be corrected.
Note:
The Visual Policy Manager (VPM) automatically generates up-to-date CPL syntax. If the
deprecations warnings are issued from the VPM policy file, you should start VPM and
reload the policy to get the latest version of the generated CPL.
deprecations warnings are issued from the VPM policy file, you should start VPM and
reload the policy to get the latest version of the generated CPL.
You can force an upgrade while deprecation warnings are present using the CLI command
load
upgrade ignore-warnings
; however, policy compilation will fail after the upgrade and the
ProxySG reverts to the default policy of ALLOW or DENY. Corrective action is required to restore
normal operation.
normal operation.
•
Any CPL local policy that performs operations such as ALLOW, DENY, Authenticate, or Redirect,
or that modifies Cookie/Set-Cookie headers, might interfere with the Notify User policy. Before
using the VPM Notify User policy, remove all coaching/splash/notify policy from the CPL local
policy file.
or that modifies Cookie/Set-Cookie headers, might interfere with the Notify User policy. Before
using the VPM Notify User policy, remove all coaching/splash/notify policy from the CPL local
policy file.
Restoring to Previous Versions
When upgrading from the SGOS 3.2.4 or higher release, a copy of the settings is saved prior to any
transformations by SGOS 4.x so that the original settings are available if the ProxySG is downgraded
to SGOS 3.2.4.
transformations by SGOS 4.x so that the original settings are available if the ProxySG is downgraded
to SGOS 3.2.4.
Keep in mind that changes made after upgrade are not preserved on a downgrade. After an upgrade
and a downgrade, the state is exactly what it was before the upgrade.
and a downgrade, the state is exactly what it was before the upgrade.