TOS Classic Compatibility Notes

Release Requirements

Backup and Restore

For any version of Tufin Orchestration Suite (TOS), TOS backups that were created on a server running TufinOS 2.17 or above cannot be restored to a server running TufinOS 2.16 or below, due to Postgres version compatibility issues. Restores fail because PostgreSQL implemented security fixes in PostgreSQL version 9.4.17 that are not backward compatible with previous minor versions.

R21-3

R21-3 requires TufinOS 3.71-3.100, or RHEL/CentOS with Apache 2.4.6 and PHP7.

After upgrading to TufinOS 3.71, you will need to immediately upgrade TOS. TOS will be unavailable until it is upgraded.

Direct upgrade from R20-2 is not supported. To upgrade from R20-2, first upgrade to R21-2 or R21-1.

For more information, see Before You Upgrade.

R21-2

R21-2 requires TufinOS 3.50-3.90 and above or RHEL/CentOS 7 before installing TOS.

Direct upgrade from R21-1 HF3 and R21-1 HF.1 to R21-2 GA or R21-2 GA.1 is not supported. To upgrade to TOS Classic R21-2, you will need to upgrade to R21-2 HF1 or above.

Direct upgrade available from R20-1, see the New Version Support Center for upgrade instructions.

R21-1

R21-1 requires TufinOS 3.30-3.90 or RHEL/CentOS 7 before installing TOS.

Direct upgrade available from R20-1 or R19-3, see the New Version Support Center for upgrade instructions.

R20-2

R20-2 requires TufinOS 3.30-3.70 or RHEL/CentOS 7 before installing TOS.

Direct upgrade available from R20-1 or R19-3, see the New Version Support Center for upgrade instructions.

R20-1

  • You must upgrade to PostgreSQL 11.x before upgrading to Tufin Orchestration Suite R20-1.

  • Tufin Orchestration Suite R20-1 can run on TufinOS 2.21 or 2.23, or RHEL/CentOS 6.

  • R19-3 GA.1 or later hotfixes

  • R19-2 HF4 or later hotfixes

TOS R19-3 GA.1 or later hotfixes, and R19-2HF4 or later hotfixes require TufinOS 2.19, 2.21 or 2.23 (or RHEL/CentOS 6).

  • With the PostgreSQL 9.4 end of life (EOL) in February 2020, Tufin is migrating Tufin Orchestration Suite to use PostgreSQL 11. The TufinOS upgrade will install PostgreSQL 11. The specific upgrade path you require to migrate to PostgreSQL 11 is dependent on both the TOS and TufinOS version you are currently running. See Upgrading to PostgreSQL 11 on TufinOS for your specific upgrade path.

  • The TOS backup and restore commands are not affected by the migration to PostgreSQL 11. A TOS backup can be restored to a different server running the matching version of TOS, regardless of the version of TufinOS. For example, a backup of (TOS R19-3 HF3, TufinOS 2.19) can be restored to a server running (TOS R19-3 HF3, TufinOS 2.21).

  • TufinOS 2.21 is available as a patch for direct upgrade, and is not available as a standalone install.

R19-1

You must upgrade the JMS certificates prior to upgrading to R19-1 or above. See Upgrading JMS Server Certificates for details.

The JMS certificate key length is checked during the upgrade: The upgrade process will stop and prompt you to update the JMS certificate if the key length is less than 2048-bit.

R18-1

TOS R18-1 through R19-2 HF3 requires TufinOS 2.14 or above, RHEL 6, or CentOS 6.

R17-3

For TOS 17-3 or above, see Upgrading MongoDB to determine if you need to manually install MongoDB.

R17-1

TOS R17-1 and above requires one of these operating systems: TufinOS 2.6 or above, RHEL 6, or CentOS 6.

R16-4

For TOS R16-4 and above, to determine if you need to manually install sTunnel on TufinOS 2.13 and above, RHEL 6.x, CentOS 6.x, see sTunnel Patch Installation Instructions.