No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Application Feature on USG6310 is not working after upgrade

Publication Date:  2015-09-08 Views:  89 Downloads:  0
Issue Description
USG6300 is upgraded from USG6000V100R001C20SPC600 to USG6000V100R001C20SPC700 and after upgrade the application feature didn't work, even the commands related to application on the security policy dissapeared from configuration
Handling Process

After the upgraded all traffic were blocked by FW, firs step for troubleshooting was to compare configuration file from old version and configuration after upgrade, we noticed next changes:

Rule on security-policy before the upgrade

rule name app_deny
  policy logging
  undo session logging
  source-zone trust
  destination-zone untrust
  source-address 10.83.47.0 0.0.0.255
  source-address 10.113.47.0 0.0.0.255
  source-address 10.143.47.0 0.0.0.255
  application category General_Internet sub-category File_Sharing
  application category Network sub-category Encrypted_Tunnel
  application category Network sub-category Proxy
  action deny

Rule on security-policy after the upgrade

rule name app_deny
  policy logging
  undo session logging
  source-zone trust
  destination-zone untrust
  source-address 10.83.47.0 0.0.0.255
  source-address 10.113.47.0 0.0.0.255
  source-address 10.143.47.0 0.0.0.255 
  action deny

It is noticed that configuration regarding application was deleted after upgraded.

We checked release notes but we didn't find any documentation about this behavior.

we tried to put again the commands and we receive next error:

Error: The free space of CF card is less than 250 MB.

We also noticed that databases couldn't get updated, next log started to appears:

The free space of CF card is less than 250MB, please ensure the storage card has sufficient space for updating.

we deleted some files in flash in order to achieve 250Mb of free space and after that we could put again configuration regaridng application and USG started to work as normally.


 

Root Cause
If the flash card of USG doesn't have at least 250Mb of free space, AV, URL,and SA databases are not updated and functions regarding application can not work. So once USG was upgraded the size of the new software version caused that space on USG decreased under 250Mb causing that application function doesnt work properly.
Solution
To delete useless files from flash card and achieve 250Mb of free space on flash card.
Suggestions
to consider to have at least 250Mb of free space all the time,  take into account this advise when it is required an upgrade, if a big file is uploaded to FW other files should be deleted.

END