R25-2 Essential Pre-Installation Information

Integrity checks

You can verify the integrity of the installation package by running the checksum commands on the archive before you extract it on your server. If the output is identical to the values listed, you can safely install the package.

To verify the integrity, run the following commands:

[<ADMIN> ~]$ sha256sum tos-xxxx-xxxxxxxx-final-xxxx.run.tgz
sha256sum tos-xxxx-xxxxxxxx-final-xxxx.run.tgz
[<ADMIN> ~]$ sha1sum tos-xxxx-xxxxxxxx-final-xxxx.run.tgz
sha1sum tos-xxxx-xxxxxxxx-final-xxxx.run.tgz

R25-2 PHF3.1.0

Item

Details
Run file name tos_25-2-phf3.1.0-final-33677.run.tgz
sha256sum 5de24febe10c1bf7abeeb4d4cc1eec44613fa46d2cddd59e48b571fcea117e3c
sha1sum 7a26976895e74ab9d9b50d6166b9ef6bfce52dc0

R25-2 PHF3.0.0 no longer available

Item

Details
Run file name tos_25-2-phf3.0.0-final-33034.run.tgz
sha256sum 22a3548f809d1d0bf4cb1812424b81f6045a143d26530cc0b201c4a3e972f9f7
sha1sum bcf1656cfe291247e11eb01b6f6c6e6e1cb05664

R25-2 PHF2.1.0

Item

Details
Run file name tos_25-2-phf2.1.0-final-32502.run.tgz
sha256sum 0faef8fed63fd38153d8ed73accd912c41308011fd4367a2475fea991f90eccd
sha1sum 8b1dbfc01dc44350f1b5d32fbe8b9aef42c7e93c

R25-2 PHF2.0.0 - no longer available

Item

Details
Run file name tos_25-2-phf2.0.0-final-31932.run.tgz
sha256sum 0070cd72221f4e88364284b126eae463c1e5e1ec8d900fb579fdd5f3dd563207
sha1sum 8a113113dd55347605699eb0610ff13bb162754b

R25-2 PHF1.0.0

Item

Details
Run file name tos_25-2-phf1.0.0-final-31148.run.tgz
sha256sum

6852174892bbc36332f28bef66d6e9631179361eef02c131c4c503dc50b86b0d
sha1sum

7158f82176306f05b10fc4bb95cd622a8b48f32a

R25-2 PGA.2.0

Item

Details
Run file name tos_25-2-pga.2.0-final-30645.run.tgz
sha256sum

6861878faf80ebe4d810dd4ca72ab27a0723342a132be1343f78218c7bd154c7

sha1sum

26431a1008b603bc55b8e3a5bd7e82798b06b1dd

R25-2 PGA.1.0

Item

Details
Run file name tos_25-2-pga.1.0-final-30446.run.tgz
sha256sum

85de10fd7fc04aa726c16d02e09600603d25bf3dc9f2692b8715d5420155b8ad

sha1sum 457c8e493de4e54c89c491758e9ca988870e218c

R25-2 PGA.0.0 (no longer available)

Item

Details
Run file name tos_25-2-pga.0.0-final-29971.run.tgz
sha256sum 713266d70d7bf08f100ac471b6abc4a5cbb9a2375ca9a7d105a45d3b1913247c
sha1sum 10153f98188c39a7be4e4f14dfabe2d00276b643

R25-2 PRC1.0.0 (no longer available)

Item

Details
Run file name tos_25-2-prc1.0.0-final-28876.run.tgz
sha256sum 12d1296cfad8e1bb7ac9582be93fb51f62f34f16c2e71db12886c5dfb212299d
sha1sum dfe06a30e4eb7500f7d1c0b25e943efc3a626033

Installing or updating

  • License usage data will be automatically collected from TOS. All TOS users must be able to access aus.tufin.com from the browsers on their workstations. For more information, see Send Reports Automatically.

Installing

  • For security purposes, all requests to the TOS GraphQL API must include the content type in the header: application/json or application/graphql. This requirement is enforced for new installations. However, we recommend activating the enforcement for updates as well. For more information, contact support.

Updating

Port changes

  • There have been no port changes since R25-1 PGA.0.0.

General information

  • AI Assistant Search: 

    • If you are updating from R25-1 and you have installed the AI Assistant Search feature, run the following command before updating:

      sudo tos config reset -p image.tag -p image.registry.url -p image.pullPolicy -s tos-ui

    • If AI assistant search has been enabled then disabled again, during the update AI assistant search will be reset to enabled.

  • UI changes: There are some UI changes when updating from R25-1. Functionality is not affected.

  • Infrastructure changes: Update from versions earlier than R25-2 takes longer for environments with large SecureChange data due to infrastructure changes.

  • CLI command changes:

    • Since R25-1 PGA.0.0 TCP-plain is a new protocol option for unencrypted TCP syslogs used in tos cluster syslog-vip add --transport.

  • Time zone changes: Since R25-2 PGA.0.0 all new backup files are created using the TOS time zone. Existing backup files from earlier releases use the UTC time zone.

Troubleshoot missing backups

If you are updating from R25-2 PGA.0.0 or R25-2 PHF1.0.0, and the tos status command shows no backups in the output even though backup files exist, do the following immediately before updating:

  1. Run the following command:

    tos backup list

    2. The name of the completed backup file appears in the first line in square brackets. For example: ["12-january-2026-10-17"]

  2. Copy the name of the completed backup file to a separate location.

  3. Run the following command:

    kubectl label backup <backup_name> backup.tufin.com/cluster-condition=OK

    4. Where <backup_name> is the name of the completed backup file you copied.

  4. Run tos status, and verify that the backup file now appears in the output:

    tos status