Embed Size (px)
Citation preview
Skybox Appliance Release Notes
9.0.500
Proprietary and Confidential to Skybox Security. © 2018 Skybox Security, Inc. All rights reserved.
Due to continued product development, the information contained in this document may change without notice. The information and intellectual property contained herein are confidential and remain the exclusive intellectual property of Skybox Security. If you find any problems in the documentation, please report them to us in writing. Skybox Security does not warrant that this document is error-free.
No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means—electronic, mechanical, photocopying, recording, or otherwise—without the prior written permission of Skybox Security.
Skybox®, Skybox® Security, Skybox Firewall Assurance, Skybox Network Assurance, Skybox Vulnerability Control, Skybox Threat Manager, Skybox Change Manager, Skybox Appliance 5500/6000/7000/8000/8050, and the Skybox Security logo are either registered trademarks or trademarks of Skybox Security, Inc., in the United States and/or other countries. All other trademarks are the property of their respective owners.
Contact information
Contact Skybox using the form on our website or by emailing [email protected]
Customers and partners can contact Skybox technical support via the Skybox Support portal
Skybox version 9.0.500 3
Introduction ........................................................................................... 4
Updates and new features ........................................................................ 5
Firmware update for Skybox 7000 and 8000 Appliance ................................ 6 Checking whether you need to update ......................................................... 6 How to update the firmware ....................................................................... 8
Updating the firmware.......................................................................... 8 Configuring Java for login ........................................................................ 14
Contents
Skybox version 9.0.500 4
Chapter 1
This document includes information about Skybox Appliance for Skybox version 9.0.500, including a list of updates and new features, and a list of fixed vulnerabilities.
Unless otherwise noted, the information in this document is relevant to all Skybox Appliances, including virtual Appliances.
Introduction
Skybox version 9.0.500 5
Chapter 2
The following updates and new features are available in this version:
› LDAP authentication
Skybox Appliance now supports login to the Appliance Administration using LDAP authentication.
Additional information is available in the Quick Start Guides.
ISO burning for all physical Appliance versions Starting in Skybox version 9.0.400 and up, the Appliance ISO is larger than 4GB and does not fit on a standard DVD+R.
We recommend that you use a DVD+R DL (Dual Layer) if you need to burn the ISO.
Updates and new features
Skybox version 9.0.500 6
Chapter 3
This chapter explains how to run a firmware update for Skybox 7000 or 8000 Appliance. This is a one-time process to fix the Meltdown and Spectre vulnerabilities found on the Intel CPU.
In this chapter
Checking whether you need to update ..................................... 6
How to update the firmware ................................................... 8
Configuring Java for login .................................................... 14
Checking whether you need to update
Use the following procedure to see if you need to update your Skybox Appliance. 1 Open Microsoft Explorer.
2 Enter the RMM address of the Appliance as the URL.
3 Authenticate using the username and the password.
Firmware update for Skybox 7000 and 8000 Appliance
Chapter 3 Firmware update for Skybox 7000 and 8000 Appliance
Skybox version 9.0.500 7
4 From the System Information tab, on the Summary page, check the firmware version in the field BMC FW Rev.
5 If the firmware version is below 1.12.11072, you need to update.
6 If you need to update, check the model number: Click the FRU Information tab. In the Product Information section, look at the Part/Model Number field.
Important: You need to know the model number for the update.
Skybox Appliance Release Notes
Skybox version 9.0.500 8
How to update the firmware
Before updating For this procedure, you will need:
› A USB flash drive › The ZIP file from Skybox
The ZIP files can be downloaded from:
• https://downloads.skyboxsecurity.com/files/iso/Misc/FirmwareUpdates/7000
• https://downloads.skyboxsecurity.com/files/iso/Misc/FirmwareUpdates/8000
Important: Use the file that matches the model of your Appliance.
Checksum (MD5) files for verification purposes are also available.
› Physical access to the Appliance machine
UPDATING THE FIRMWARE
Before you start Make sure that you have permission to log in to the RMM of the Appliance from your local machine. For instructions, see Configuring Java for login (on page 14).
To update the firmware 1 Open the ZIP file and copy the entire contents of the package file to a USB
flash drive. All the files must be stored in the root directory of the flash drive.
2 Connect the USB flash drive to the back panel of the Appliance machine.
3 Make sure that no other USB is connected.
4 Connect to the RMM as in steps 1 through 3 in the previous procedure, and click the Remote Control tab.
Chapter 3 Firmware update for Skybox 7000 and 8000 Appliance
Skybox version 9.0.500 9
5 Click Launch Console.
6 In the dialog box that appears (as shown), click OK.
7 In the Security Warning dialog box that appears (as shown), click Continue.
8 In the next Security Warning, select I accept... and click Run.
Skybox Appliance Release Notes
Skybox version 9.0.500 10
A console window opens.
9 Log in as root.
10 Make sure that Skybox is not running on the Appliance machine before performing the update.
a. To shut down Skybox Server, use the command: service sbvserver stop
b. To shut down Skybox Collector, use the command: service sbvcollector stop
11 Reboot the machine.
Chapter 3 Firmware update for Skybox 7000 and 8000 Appliance
Skybox version 9.0.500 11
12 When the system starts, press <F2> until you get the menu for booting.
13 From the menu, select Boot Manager and press <Enter>.
14 From the Boot Manager, select Launch EFI Shell and press <Enter>.
Skybox Appliance Release Notes
Skybox version 9.0.500 12
After about 5 seconds, the following screen appears.
15 Press <Enter>.
Chapter 3 Firmware update for Skybox 7000 and 8000 Appliance
Skybox version 9.0.500 13
When the procedure is almost finished, you will see the following.
16 Wait 2 minutes and log in again to the remote console.
You will see the following.
Skybox Appliance Release Notes
Skybox version 9.0.500 14
17 Press 5 to exit the update.
You will see the following.
18 Press any key to continue.
Configuring Java for login This procedure enables you to log in to the RMM of the Appliance machine from your local computer.
Chapter 3 Firmware update for Skybox 7000 and 8000 Appliance
Skybox version 9.0.500 15
1 From the Windows Start menu, select Configure Java.
2 The Java Control Panel appears.
Skybox Appliance Release Notes
Skybox version 9.0.500 16
3 Click the Security tab.
Chapter 3 Firmware update for Skybox 7000 and 8000 Appliance
Skybox version 9.0.500 17
4 Click Edit Site List.
5 Add the URL for the RMM of the Appliance machine.
