Prepare to update to Maiden

This article applies to our On-Premise Appliance Filter and Firewall product only, not to Cloud.

 

This article outlines how to update from the Leeds to the Maiden release. You can find general guidance for updating your On-Premise Appliance here: System Update Best Practices

What’s changed in Maiden?

Some features and modules present in the Leeds version of Smoothwall are not in Maiden. Follow the instructions below to cease using these modules so you are able to update to Maiden.

Tip

If you haven’t purchased a feature as part of your package, you won’t be able to navigate to the page, and won’t need to switch the feature off.

 

Features and Modules

Bandwidth

You can delete your setup or uninstall this module. Either:

  • Select Bandwidth from the Updates & Releases page, or go to Bandwidth > Control > Classes. Hover over each class and select Delete for all entries aside from the All Traffic class.
  • Go to System > Maintenance > Modules, then hover over the Bandwidth module and select Uninstall. After uninstalling and rebooting, you will no longer see the Bandwidth section in the top menu.

SMTP relay

You can turn off or uninstall this module. Either:

  • Select SMTP relay from the Updates & Releases page, or go to Email > SMTP > Relay. Deselect the Enable mail relay checkbox and select Save.
  • Go to System > Maintenance > Modules, then hover over the Anti-Spam module and select Uninstall. After uninstalling and rebooting, you will no longer see the Email section in the top menu.

SIP Proxy

You can turn off or uninstall this module. Either:

  • Select SIP proxy from the Updates & Releases page, or go to Services > Proxies > SIP. Deselect the Enabled checkbox and select Save.
  • Go to System > Maintenance > Modules, then hover over the SIP module and select Uninstall. After uninstalling and rebooting, you will no longer see the Services > Proxies > SIP page in the top menu.

FTP Proxy

You can turn off or uninstall this module. Either:

  • Select FTP proxy from the Updates & Releases page, or select the FTP Proxy service on your Dashboard, because this page can’t be accessed from the menus. Deselect the Enabled checkbox and select Save.
  • Go to System > Maintenance > Modules, then hover over the FTP module and select Uninstall.

SWURL

This is no longer accessible and can’t be used.

Routing Information Protocol (RIP)

You’ll see Routing server on the Updates & Releases page. You can also check if you are using this with the Routing Server service on your Dashboard. To turn off this module:

  1. Go to Network > Routing > RIP.
  2. Deselect the Enabled checkbox.
  3. Select Save.

Authentication Methods

A number of legacy authentication methods are no longer present in Maiden.

Legacy Directories

Once updated to Maiden, these directories will no longer be available to set up when you select Add new directory:

  • eDirectory
  • Apple/OpenLDAP Directory
  • 389 Directory
  • RADIUS Accounting
  • Active Directory (legacy method)

If you have any of these directories set up in Leeds, you’ll see Legacy Directories on the Updates & Releases page.

To remove the directory, go to Services > Authentication > Directories. Hover over the directory and select Delete.

Web Proxy Authentication Policies

If you have any Authentication policies set up using one of these methods, you’ll see Legacy Auth Methods on the Updates & Releases page:

  • Non-Transparent Ident
  • Identification by Location - Instead, you can use Location Objects, with a Web Proxy Authentication Policy that default to a Group for different locations.
  • Redirect users to SSL login page (with background tab) - use the authentication using 'session cookie' option instead.
  • Redirect users to non-SSL login page (with background tab) - use the authentication using 'session cookie' option instead.
  • Smart redirect

To remove these, go to Services > Authentication > Manage policies. Either:

  • Select the pencil icon to edit your policy, and change the Method.
  • Select the icon with the X to delete the policy.

IDex Client

IDex Client is not available in Maiden, but IDex Agent is still available.

Note

Using IDex Client will not prevent you from updating.

 

VPN

IPSec Roadwarriors

Go to Network > VPN > IPSec roadwarriors and select Remove.

L2TP VPN server

Go to Network > VPN > L2TP roadwarriors and select Remove.

MD5 VPN Certificates

If any of your VPN Certificates or Certificate Authorities use MD5, you’ll see Insecure VPN Certificates on the Updates & Releases page:

  1. Go to Network > VPN > Certificate authorities.
  2. Identify any Certificate Authorities with an X in the Secure column.
  3. Renew the Certificate Authorities, or select the checkboxes for these items in the Mark column and select Delete.
  4. Regenerate any Certificates that were created from the Certificate Authorities.
  5. Go to Network > VPN > Certificates.
  6. Identify any Certificates with an X in the Secure column.
  7. Renew the Certificates, or select the checkboxes for these items in the Mark column and select Delete.

How do we update to Maiden?

  1. Go to System > Maintenance > Updates & Releases.
  2. Select Refresh to check available releases.
  3. Find Maiden in the Releases: new functionality and major upgrades section.

    Tip

    Tip: Select Details to see what improvements and fixes for issues have been included in Maiden so far.

  4. Select either:
    • Install to update immediately.
    • Schedule to choose a time to install the update and reboot. Select your time from the drop-down, then select Apply. If the scheduled time has already passed today, the update will take place tomorrow at the time selected.
  5. You will be updated to the latest version of Leeds.
  6. Repeat the process to update to the latest version of Maiden.

update to maiden.png

Image 1: The Updates & Releases page with Maiden available.

 

Troubleshooting

There is no Install button

You won’t be able to update to Maiden if any of the features detailed in the What’s changed in Maiden? section above (apart from IDex client) are in use.

If any of these are in use, you will see a link for this feature. Selecting this link will take you to the configuration page for this feature, where you can turn if off.

Image 2: An example feature which must be disabled before you can update to Maiden.

 

Can’t update to Maiden

If you have turned off all the modules that would prevent you from updating to Maiden but still don’t see Maiden as an option, contact Smoothwall Support.