R25-2 Essential Pre-Installation Information

Integrity Checks

You can verify the integrity of the installation package by running the checksum commands on the archive before you extract it on your server. If the output is identical to the values listed, you can safely install the package.

To verify the integrity, run the following commands:

[<ADMIN> ~]$ sha256sum tos-xxxx-xxxxxxxx-final-xxxx.run.tgz

[<ADMIN> ~]$ sha1sum tos-xxxx-xxxxxxxx-final-xxxx.run.tgz

R25-2 PRC1.0.0

Installing or Updating

• License usage data will be automatically collected from TOS. All TOS users must be able to access aus.tufin.com from the browsers on their workstations. For more information, see Send Reports Automatically.

Installing

• For security purposes, all requests to the TOS GraphQL API must now include the content type in the header: application/json or application/graphql. This requirement is enforced for new installations. However, we recommend activating the enforcement for updates as well. For more information, contact support.

Updating

• From R25-2, there may be minor variations in the UI. Functionality is not affected.

• Upgrades from R24-2 and earlier may take up to two hours longer due to a data migration process.

• Upgrade from versions earlier than R25-2 takes longer for environments with large SecureChange data due to infrastructure changes.

• Port changes:

  • After upgrading from versions earlier than R25-1 PGA.0.0 there is a new port mapping for unencrypted TCP syslogs.

    Source: 601

    Destination: 32514

    The port is one of the default ports for tos cluster syslog-vip add

• CLI command changes

  • Since R25-1 PGA.0.0 TCP-plain is a new protocol option for unencrypted TCP syslogs used in tos cluster syslog-vip add --transport.

• From R25-2 PGA.0.0 all new backup files are created using the TOS time zone. Existing backup files from earlier releases use the UTC time zone.