Overview

This guide primarily provides information on how to upgrade your McAfee® Network Security Platform setup to the latest 9.2 release from the following versions:

  • 8.1
  • 8.3
  • 9.1

Important Notes:

  • If you have any Sensors on 8.1 or later software, see the respective Sensor upgrade section for upgrade paths to 9.2. However, before you upgrade the 8.1 Sensors to 9.2, you must first upgrade the Manager to 9.2.
  • The NS-series Sensor software version for 9.2 consists of two versions. Sensor software version 9.2.5.5 is applicable for all NS-series Sensor models. Sensor software version 9.2.5.24 is applicable only if you want to enable Outbound SSL Decryption feature.
  • You must first purchase a license to enable outbound SSL decryption feature. To obtain a license for outbound SSL decryption, contact MB Licensing. An email containing the license will be sent from MB Licensing. The 9.2.5.24 Sensor software version for outbound SSL decryption is available at Patches and Downloads. If you are a first time user, you must register with your email ID and Grant number to log in to the portal. In the Service Portal, click Patches and Downloads to register and log in to the portal.
  • If you are on a software version with 1024-bit RSA keys on ports 8501, 8502, and 8503, see Migration from SHA1 to SHA256 signing algorithm before you upgrade.
  • The Network Security Platform 9.2 release is specific to the Central Manager, Manager, NS-series Sensors, and Virtual IPS Sensors devices.
  • As with any upgrade, McAfee strongly recommends that you always first try the upgrade in a test environment.
  • The current version of 9.2 Manager software can be used to configure and manage the following appliances:
    • NS-series Sensors on 8.1, 8.3, 9.1, and 9.2 software.
    • Virtual IPS Sensors on 8.1, 8.3, 9.1, and 9.2 software.
    • NTBA Appliances (physical and virtual) on 8.1, 8.3, 9.1 software.
    Note: Since M-series, Mxx30-series, and XC Cluster Sensors are end-of-life, Sensor software version 9.2 will not be available. You can manage version 9.1 or below M-series, Mxx-30 series, and XC Cluster Sensors using Manager version 9.2.
  • The upgrade involves the following phases that you must complete in the same order:
    1. If applicable, McAfee® Network Security Central Manager upgrade.
    2. McAfee® Network Security Manager upgrade.
    3. McAfee® Network Security NS-series Sensor, or Virtual IPS Sensor software upgrade.
    4. If applicable, NTBA Appliance upgrade.

You need the following documents during the upgrade process:

  • McAfee Network Security Platform 9.2 Product Guide
  • McAfee Network Security Platform 9.2 Sensor Reference Guide
  • McAfee Virtual Network Security Platform 9.2 Installation Guide

It is also strongly recommended that you read the Release Notes for the associated product before you upgrade because this document makes references to several of the new features.