Update Management for Managed Devices

UserGate Management Center allows you to create a centralized policy for updating the UserGate software (UGOS) and updatable libraries provided on subscription (URL filtering category database, IDPS, IP address/URL/content type lists etc.).

Note After adding a UserGate NGFW to UGMC management, the UserGate device starts automatically downloading all updates from the UGMC server.

To configure update management using UGMC, follow these steps:

Name

Description

Step 1. Configure an update check schedule

An update check schedule defines the time and frequency of checking for updates. It can be configured locally on each UserGate device or centrally using UGMC templates. The configuration is done identically in both cases. A local update check schedule is configured in the General settings section of the device's web management console. When UGMC is used, the schedule is configured in the General settings section of a UGMC template.

For more details on how to configure an update check schedule, see the General Settings chapter of UserGate 6 Administrator Guide.

Step 2. Configure a software update policy for UserGate devices

A software update policy allows you to specify an update available for installation on all or selected MDs. For more details on updating software, see the Software Updates section.

Step 3. Configure a library update policy for UserGate devices

A library update policy allows you to select the desired library updates for installing on MDs. For more details on libraries updates, see the Libraries Updates section.

Software Updates

From time to time, UserGate issues software updates for UserGate NGFWs. These updates are uploaded to the UserGate repository (http://static.usergate.com) from where they can then be downloaded to NGFWs. If a UserGate NGFW is managed from Management Center, it checks automatically for available updates on the Management Center server which acts as a repository. The UserGate repository is used in this case by the UGMC server for obtaining new updates.

In some cases, the UserGate support service can suggest that certain customers install specific updates that are unavailable for download from the repository. Such updates should be added to UGMC by importing them from an update file.

To install updates, follow these steps:

Name

Description

Step 1. Upload the updates to the UGMC repository

The updates can be uploaded from the UserGate repository or imported manually from an update file.

To upload the updates from the repository, go to the NGFW management ➜ Software updates section and click Online updates. The list of updates available for download from the UserGate repository will be displayed. Highlight the desired updates and click Select. The selected updates will be uploaded to UGMC.

For manual upload, go to the NGFW management ➜ Software Updates section, click Import update, and select the update file. If the update file has no update name and version specified, enter these in the corresponding fields. By clicking Save, the selected update will be uploaded to UGMC.

Step 2. Approve the update for all or specific devices

To install an update on all devices, select the update of interest and click Approve update. Only one update can be approved for all devices.

If you need to install this update on a group of devices (e.g., for testing), specify the managed devices from which this update will be available in the update's properties and set the Approve update checkbox.

Step 3. Install the update.

After an update is approved, it becomes available for downloading for all managed devices or for a group of them. An MD downloads the update according to its update check schedule. When downloaded, the update can be installed centrally by the administrator from the MC console or manually on a specific managed device by the device's administrator.

An update in the UGMC repository has the following properties:

Name

Description

Name

The name of the update. Usually not editable, hard-coded in the update code.

Description

An arbitrary description of the update.

Version

The update version. Not editable, hard-coded in the update code.

Size

The size of the update.

Release

The UserGate release for which this update is issued. Not editable, hard-coded in the update code.

Status

The update's status --- for example, downloaded.

Progress

Shows the progress of downloading the update from the UserGate repository.

Update channel

The update channel of the UserGate repository:

  • Stable: stable software updates

  • Beta: experimental updates

Changelog

A link to the list of changes included in this update.

Managed Devices

The list of managed devices for which this update is intended.

Added

The date the update was added to the UGMC repository and the name of the administrator who added it.

Approved

The date the update was approved and the name of the administrator who approved it.

Libraries Updates

Libraries are updatable resource databases (URL filtering categories, IPS signatures, IP address lists, URLs, MIME types, morphological databases etc.) provided to UserGate customers on a subscription basis. These updates are uploaded to the UserGate repository (http://static.usergate.com) from where they can then be downloaded to UserGate NGFWs. If a UserGate NGFW is managed from Management Center, it checks automatically for available updates on the Management Center server which acts as a repository. The UserGate repository is used in this case by the UGMC server for obtaining new updates. By default, UGMC checks for and downloads library updates automatically.

When UGMC does not have access to the UserGate repository, you can import the update manually from an update file you have received in your UserGate client profile (https://my.usergate.com).

Libraries stored in the UGMC repository are available to all UserGate MDs. An MD downloads the update automatically according to its update check schedule.

A library update in the UGMC repository has the following properties:

Name

Description

Name

The name of the update. Not editable, hard-coded in the update code.

Description

An arbitrary description of the update.

Download

The mode used to download new versions. Automatically is installed by default; in this mode, UGMC automatically checks for and downloads new versions in the UserGate repository. If Manually is selected, UserGate will not update the selected library automatically.

Size

The size of the update.

Version

The version of the library update.

Updated

The date and time when the specific library was last updated.