Prepare to update to Maiden

This article applies to our On-Premise Appliance Filter and Firewall product only, not to Cloud.

 

This article outlines how to update from the Leeds to the Maiden release. You can find general guidance for updating your On-Premise Appliance here: System Update Best Practices

Switch off these features not available in Maiden

Some features and modules present in the Leeds version of Smoothwall are not in Maiden. Follow the instructions below to stop using these modules so you can update to Maiden.

Tip

If you haven’t purchased a feature as part of your package, you won’t be able to navigate to the page, or need to switch the feature off.

 

Bandwidth

You can delete your setup or uninstall this module. Either:

  • Select Bandwidth from the Updates & Releases page, or go to Bandwidth > Control > Classes. Hover over each class and select Delete for all entries except All Traffic.
  • Go to System > Maintenance > Modules, then hover over the Bandwidth module and select Uninstall. After uninstalling and rebooting, you will no longer see the Bandwidth section in the top menu.

SMTP relay

You can turn off or uninstall this module. Either:

  • Select SMTP relay from the Updates & Releases page, or go to Email > SMTP > Relay. Deselect the Enable mail relay checkbox and select Save.
  • Go to System > Maintenance > Modules, then hover over the Anti-Spam module and select Uninstall. After uninstalling and rebooting, you will no longer see the Email section in the top menu.

SIP Proxy

You can turn off or uninstall this module. Either:

  • Select SIP proxy from the Updates & Releases page, or go to Services > Proxies > SIP. Deselect the Enabled checkbox and select Save.
  • Go to System > Maintenance > Modules, then hover over the SIP module and select Uninstall. After uninstalling and rebooting, you will no longer see the Services > Proxies > SIP page in the top menu.

FTP Proxy

You can turn off or uninstall this module. Either:

  • Select FTP proxy from the Updates & Releases page, or select the FTP Proxy service on your Dashboard, because this page can’t be accessed from the menus. Deselect the Enabled checkbox and select Save.
  • Go to System > Maintenance > Modules, then hover over the FTP module and select Uninstall.

SWURL

This is no longer accessible and can’t be used. Instead, use User Portal, or our Cloud products Cloud Filter and Cloud Reports.

Routing Information Protocol (RIP)

You’ll see Routing server on the Updates & Releases page. You can also check if you are using this with the Routing Server service on your Dashboard. To turn off this module:

  1. Go to Network > Routing > RIP.
  2. Deselect the Enabled checkbox.
  3. Select Save.

Authentication Methods

A number of legacy authentication methods are no longer present in Maiden.

Legacy Directories

These directories will no longer be available to set up when you select Add new directory:

  • eDirectory
  • Apple/OpenLDAP Directory
  • 389 Directory
  • RADIUS Accounting
  • Active Directory (legacy method)

If you have any of these directories set up in Leeds, you’ll see Legacy Directories on the Updates & Releases page.

To remove the directory, go to Services > Authentication > Directories. Hover over the directory and select Delete.

Web Proxy Authentication Policies

If you have any Authentication policies set up using one of these methods, you’ll see Legacy Auth Methods on the Updates & Releases page:

  • Ident (for Non-Transparent Policies)
  • Identification by Location - Use Location Objects, with a Web Proxy Authentication Policy that defaults to a Group for different locations.
  • Redirect users to SSL login page (with background tab) - Use the authentication using 'session cookie' option instead.
  • Redirect users to non-SSL login page (with background tab) - Use the authentication using 'session cookie' option instead.
  • Smart redirect

To remove these, go to Web Proxy > Authentication > Manage policies. Either:

  • Select the pencil icon to edit your policy, and change the Method.
  • Select the icon with the X to delete the policy.

VPN

IPSec Roadwarriors

Go to Network > VPN > IPSec roadwarriors and select Remove.

L2TP VPN server

Go to Network > VPN > L2TP roadwarriors and select Remove.

MD5 VPN Certificates

If any of your VPN Certificates or Certificate Authorities use MD5, you’ll see Insecure VPN Certificates on the Updates & Releases page:

  1. Go to Network > VPN > Certificate authorities.
  2. Identify any Certificate Authorities with an X in the Secure column.
  3. Renew the Certificate Authorities, or select the checkboxes for these items in the Mark column and select Delete.
  4. Regenerate any Certificates that were created from the Certificate Authorities.
  5. Go to Network > VPN > Certificates.
  6. Identify any Certificates with an X in the Secure column.
  7. Renew the Certificates, or select the checkboxes for these items in the Mark column and select Delete.

 

Features that won’t stop you from updating

Features in Leeds

IDex Client

As IDex Client is not available in Maiden, it won’t prevent you from updating, but you should move from IDex Client to supported alternatives.

Cache options

The Cache options section in Web Proxy > Web Proxy > Settings is not in Maiden.

Before you move to Maiden, you should:

  • Change the Global cache size to 0.
  • Set Use shared memory for cache to Disable.

If you move to Maiden without changing these settings, contact Smoothwall Support, and we will switch off caching for you.

Internet Cache Protocol (ICP)

The Internet Cache Protocol (ICP) section in Web Proxy > Web Proxy > Settings is not in Maiden, so no action is needed.

Network application helpers

In Network > Settings > Advanced, the FTP, H.323, IRC and SIP application helper checkboxes are not in Maiden, so no action is needed.

Mobile Proxy

The Web Proxy > MobileProxy pages are not in Maiden, so no action is needed.

UPS

You can’t set up connections to Uninterruptible power systems (UPSs) because the System > Hardware > UPS page is not in Maiden. Any previous connections are automatically switched off in Maiden, so no action is needed.

Message Censor

These pages are not in Maiden:

  • The Services > Message Censor pages.
  • Guardian > Web filter > Outgoing.

Message Censor is automatically switched off in Maiden, so no action is needed.

Connect Filter

Connect Filter is not available in Maiden. See Important Information about the Smoothwall Connect for Chromebooks Chrome extension.

Moving back to Maiden

You can update to Maiden, revert to Leeds, and then update to Maiden later. The Updates & Releases page will flag any features that won’t be available in Maiden, but you can select Install.

Image 1: An example feature which is not available in Maiden, but you are still able to Install.

 

How do we update to Maiden?

  1. Go to System > Maintenance > Updates & Releases.
  2. Select Refresh to check available releases.
  3. Find Maiden in the Releases: new functionality and major upgrades section.

    Tip

    Select Details to see what improvements and fixes for issues have been included in Maiden so far.

  4. Select either:
    • Install to update immediately.
    • Schedule to choose a time to install the update and reboot. Select your time from the drop-down, then select Apply. If the scheduled time has already passed today, the update will take place tomorrow.
  5. Smoothwall will update to the latest version of Leeds.
  6. Repeat the process to update to the latest version of Maiden.

update to maiden.png

Image 2: The Updates & Releases page with Maiden available.

 

Troubleshooting

There is no Install button

You won’t be able to update to Maiden if any of the features detailed in the Switch off these features not available in Maiden section (apart from IDex client) are in use.

If any of these are in use, you will see a link for this feature. Selecting this link will take you to the configuration page for this feature, where you can turn if off.

Image 3: An example feature which must be turned off before you can update to Maiden.

 

VMTools prevents you from moving to Maiden

If you are using VMTools, you’ll see VMware guest supporting server on the Updates & Releases page. You won’t be able to install Maiden yet - check back in future for further updates.

Image 4: The Updates & Releases page where Maiden is not available due to VMTools.

Can’t update to Maiden

Check you have turned off all the modules that would prevent you from updating to Maiden and that you don’t see the VMTools message. If you still don’t see Maiden as an option, contact Smoothwall Support.