Athena NGFW (Next-Generation Firewall)

Athena NGFW (previously known as Network Secure) provides comprehensive protection for every network perimeter, ensuring the safety of your valuable assets, data, and users from emerging threats.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
8.0.95
{{sendMatomoQuery("Athena NGFW (Next-Generation Firewall)","Upgrade Paths")}}

Upgrade Paths

{{ $t('productDocDetail.updateTime') }}: 2026-01-07

 

No.

Version Before Upgrade

Version After Upgrade

Remarks

1

Network Secure 8.0.83.76

Network Secure 8.0.95.2062

Network Secure 8.0.83.76: AF8.0.83.76

Build20230328

2

Network Secure 8.0.85.312

Network Secure 8.0.95.2062

Network Secure 8.0.85.312:

AF8.0.85.312 Build20230823

3

Network Secure 8.0.90.556

Network Secure 8.0.95.2062

Network Secure 8.0.90.556:

AF8.0.90.556 Build20240102

Table 4: Upgrade paths.

HA Device Upgrade

You do not need to ungroup HA devices during the upgrade. You can manually perform an active/standby switchover to ensure that the upgrade only occurs on the standby device. It minimizes the risk of business disruption due to network failures.

Procedure:

Step 1.   Before the upgrade starts, manually synchronize the configuration on the active device, perform an active/standby switchover, and check the service status.

Step 2.    Check the synchronization report on the active device. If the synchronization is successful, continue the upgrade. If it fails, locate the failure cause and resolve the configuration differences between the two devices.

Step 3.    Back up the active and standby device configuration to avoid configuration loss.

Step 4.    If preemption is enabled, disable it on both devices to prevent active/standby switchover issues during the upgrade.

Step 5.    Upgrade the standby device. If both devices are active, manually switch one to standby. If the upgrade fails, contact a technical support

representative to troubleshoot issues or roll back as soon as possible. Business services are carried out by other devices and will not be affected.

Step 6.   After the standby device is upgraded and restarted, wait a few minutes. Then, check the session difference between the active and standby  devices or whether critical business sessions have been synchronized between the devices. If synchronized, perform an active/standby switchover and check  the service status on the new active device.

Sessions may fail to be synchronized due to version differences between the active and standby devices. Therefore, after the active/standby switchover, some services may be interrupted and need to be restored.

Step 7.    Ensure the services are normal on the new active device and then upgrade the new standby device. If the upgrade fails, contact a technical support representative to troubleshoot issues or roll back the device. If you need to roll back, roll back the current standby device first. Then, perform an active/standby switchover and roll back the new standby device. Make sure  that the rollback takes place only on the standby device.

 

Step 8.   After the standby device is upgraded, view the report to check whether synchronization is successful on the active device. If it fails, perform manual synchronization. If it still fails, troubleshoot issues.

Step 9.    If the synchronization is successful, you can check the service status.

Step 10. If preemption is disabled before the upgrade, enable it now.