Since an official TSCM OS upgrade is not in the immediate future, we tested the in-place OS upgrade from 20.04 to 22.04 using the ThreatSTOP Firepower device type , which is one of the simplest ThreatSTOP integrations. For this integration, the TSCM pulls down the IP firewall policy and makes it available to the firewall device via HTTPS (external block list). This in-place OS upgrade works fine and resolves internal scanning alerts for ssh.
This is the sequence of operations:
-
Apply any OS updates on your current TSCM (sudo apt-get update && sudo apt-get dist-upgrade, reboot TSCM)
-
Get a VMware snapshot of your current TSCM (vmware console)
-
Perform OS release upgrade (sudo do-release-upgrade)
-
There will be several dialog options
-
There will be a reboot required
-
Apply OS updates after reboot, just in case (sudo apt-get update && sudo apt-get dist-upgrade)
-
The process will take about 30 minutes
-
Confirm ThreatSTOP operation ("tsadmin update" for each device)
-
If testing fails, troubleshoot or revert to VM snapshot.
If you have questions, or would like to work with the ThreatSTOP support team to perform the upgrade, please open a support ticket.
Comments