Before you install the WSM and Fireware XTM v11.3.2 software, read the information in the Known Issues section below.
Note Before you upgrade a new Firebox X Core or Peak e-Series to Fireware XTM v11.x, you must first run the v10.2.x Quick Setup Wizard. After the basic v10.2.x configuration has been saved to your Firebox, use the upgrade instructions below to upgrade to Fireware XTM v11.x.
Note If your Firebox X Core or Peak e-Series device uses a Fireware version older than v10.2, you must first upgrade your Firebox to Fireware v10.2.x before you can upgrade to Fireware XTM v11.x.
The default path is C:\Program Files\Common Files\WatchGuard\resources\FirewareXTM\11.3.2\Core_Peak\
FW110302BNNNNNN.wgu where "NNNNNN" is the release build number.
If you get an error, click OK or Cancel and continue with the procedure.
When the backup and upgrade are finished, the Firebox reboots.
To downgrade from Fireware XTM to Fireware, you must download a special downgrade file from the software downloads page. The file is called utm_core_peakdown2fw.zip and downgrades your device to Fireware v10.2.8. Once your Firebox is downgraded to v10.2.8, you can then restore your Fireware configuration, or upgrade to v10.2.9 or higher and try the upgrade to Fireware XTM again.
During the downgrade procedure, the Storage LED on the front of the Firebox will blink rapidly. When the downgrade procedure is complete, the Firebox will start v10.2.8 with the configuration file you had before the upgrade to v11.x. The version number appears as "10.2.8dwn" to indicate that it is a downgrade. We recommend that you restore your previous v10.2.x backup after you downgrade from v11.x, or install any released v10.2.x operating system before you perform another upgrade to v11.x.
WSM v11.x includes a HA upgrade wizard to help you upgrade the software on both your HA devices so you can enable FireCluster. With FireCluster, you can choose to configure your two devices in an active/passive cluster or an active/active cluster. Before you begin the upgrade process, we strongly recommend that you connect to the online help at http://www.watchguard.com/help/docs/wsm/11/en-US/index.html and read the chapter about FireCluster. There are important differences in license requirements and network integration you must understand before you implement FireCluster. Note that the HA upgrade wizard helps you to update the OS on your HA devices. You must reconfigure the devices for FireCluster manually when the upgrade is complete.
If you are in routed mode and have HA enabled in your Fireware v10.2.x configuration file, WSM launches the HA Upgrade Wizard automatically when you select File > Upgrade from Policy Manager. The Wizard upgrades the OS on your first HA device, then puts it in a factory-default state until the second HA box is updated. The Wizard then prompts you to upgrade your second device.
As soon as the second device is upgraded, the FireCluster Setup Wizard will launch to help you enable and configure your FireCluster. When you complete the Setup Wizard, you must save your configuration to the active device. Then, you must reboot both devices in your FireCluster.
As with High Availability in Fireware v10.x, you cannot enable FireCluster if any external interface is configured to use DHCP or PPPoE.