Forum Discussion

4 Replies

  • Walter_Kacynski's avatar
    Walter_Kacynski
    Icon for Cirrostratus rankCirrostratus
    Feb 03, 2015

    We were caught by the default http and cookie persistent profiles being reset as well as the default removal of SSL 3.0 from the cipher list.

     

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Feb 03, 2015

    I'd refer you to the release notes, especially the new features and new behaviours section - this'll help to remove any unexpected changes.

     

    Main difference between 11.3. and 11.5. will be no more Http Class and Local Traffic Policy in its place. The upgrade can/should upgrade these for you but if there are complexities e.g. certain regex strings, then it may not do so. Also, any http class commands in irules are no deprecated and will need the irules to be rewritten.

     

    Yes, license activation would be good practice before any upgrade.

     

    N

     

  • StephanManthey's avatar
    StephanManthey
    Icon for Nacreous rankNacreous
    Feb 03, 2015

    Hi Rick,

     

    license renewal will be mandatory for an upgrade. Make sure "service check date" in the new license file is up-to-date.

     

    Since TMOS v11.4 the so called policy rules were introduced to replace the former http classes.

     

    The migration script will translate http classes into policy rules automatically. But the result needs to be tested carefully.

     

    As written by Walter, changes in default profiles (i.e. tcp, fastL4 etc.) may get lost.

     

    It´s always best practice to use the default profiles as they are and use them as parents to customized profiles.

     

    With an update like this you will also get a new big3d. In case you have GTM in your infrastructure look after iQuery communication issues.

     

    My summary is primarily about LTM aspects. Have a look at the release notes regarding other modules in use, i.e. ASM, APM etc..

     

    Thanks, Stephan