Upgrade Unitrends 7.1
-
So how does one upgrade Unitrends UEB 7.1 to what ever the latest version is?
I've got it kicking around and I'd like to have a look at the new version.I found the "Check for updates" section in the UEB interface but it can't get through out proxy server for whatever reason. I have attempted to apply proxy settings to it but that had no effect.
Also, what's the go with UEB and Unitrends Free? When I grabbed UEB 7.1, it was the free version and the website wording was much clearer. All I've found is the 1TB limitation of the freebie.
-
Getting the updates is how you upgrade. You need port 21 open for connection to ftp.unitrends.com to get those. Also, I think you're (it's easy to do) confusing the "free for SW members" UEB with the new product that is named "Unitrends Free". The latter is the 1TB limited product. The SW-member exclusive is free, but it's not "Free". You're using the original UEB product, you just have a special code to get that free limited license (Spicy UEB).
-
@art_of_shred said:
Getting the updates is how you upgrade. You need port 21 open for connection to ftp.unitrends.com to get those. Also, I think you're (it's easy to do) confusing the "free for SW members" UEB with the new product that is named "Unitrends Free". The latter is the 1TB limited product. The SW-member exclusive is free, but it's not "Free". You're using the original UEB product, you just have a special code to get that free limited license (Spicy UEB).
Great, well that's just difficult. Is there no other way?
- Is the firewall rule for the UEB apliance or just an ftp client?
Yes, I think I may have confused the two editions.
-
The UEB appliance needs port 21 for updates. No easy way around it.
-
@art_of_shred said:
The UEB appliance needs port 21 for updates. No easy way around it.
Well, that's disappointing.
-
I never understand why that's such a big deal. It's just an outbound request.
-
@art_of_shred said:
I never understand why that's such a big deal. It's just an outbound request.
Because it is very common to block all outbound traffic except for web traffic to prevent people from doing downloads, connecting to unmonitored services or whatever. Opening any port to the network means it can be used for whatever someone wants since you can't control what services run on port 21.
This seems odd when you are used to direct access networks but if you are dealing with proxied networks they only work by having all ports, including 80 and 443, closed and letting the proxy handle those connections.
This is how most larger businesses (those over about 1,000 users) tend to work. Sometimes for security, sometimes for performance (proxy servers reduce load on the WAN while providing monitoring and security.)
It's possible to open a single port to a single device but it often breaks processes, requires crossing team boundaries, introduces complications, etc. FTP is specifically problematic because it uses a bizarre port hopping scheme making it difficult to proxy and track.
-
How about temporarily opening it when you need to run updates?
