Update from Previous Version

To update your Flowmon appliance, go to Configuration Center > Versions where you can install updates from available packages or upload an update package. For detailed instructions on the update process, refer to Versions.

Pre-installation checks

When you start the update, the system checks if your appliance is ready. If the system finds any issues, you will see:

• A popup warning that shows the number of failed checks

• A bell notification with details about each issue

The following sections describe issues that prevent the update.

Invalid license

Error messages:

• Cannot perform update without valid license.

A trial or expired license is used.

• Cannot perform update without valid Standard or Extended Support.

A license without support (or with expired support) is used.

Apply a valid license with active Standard or Extended Support. Use the Configuration Center → License tab to upload a valid .key file.

Deprecated Flowmon Traffic Recorder license

Error message:

Cannot perform update with license containing Flowmon Traffic Recorder (FTR). Please contact us via Support portal to obtain a new license without FTR.

The license contains a deprecated FTR plugin name. Request and apply a new license updated with FPI. Use the Configuration Center → License tab to upload a valid .key file.

Rescue partition is missing

Error message:

Cannot perform update without Rescue disk partition. Please contact us via Support portal.

The rescue partition is required for the installation but it is not found. The system partition layout is in an unexpected state, possibly because an old virtual appliance template was used. You must redeploy the system.

Azure NSG Flow Logs collection is in use

Error message:

Cannot perform update with enabled Azure NSG Flow Logs collection. Disable Azure NSG Flow Logs collection in FCC -> FMC Configuration -> Azure Flow Logs. Azure NSG Flow Logs is being deprecated by Microsoft and replaced by VNet Flow logs.

Flowmon 13 has replaced Azure NSG Flow Logs with Azure VNet Flow Logs. The update cannot proceed because Azure NSG Flow Logs collection is active. You must disable Azure NSG Flow Logs before updating.

A custom docker container is running

Error message:

We have detected some custom Docker containers running on your appliance and that is preventing you from upgrading to the Flowmon 13.

Custom Docker containers are not supported in Flowmon 13. You must stop all custom Docker containers before updating.

Missing AVX instructions for VA

Error message:

Missing AVX instructions support. If this is a virtual platform, try to upgrade the virtual hardware compatibility.

Flowmon 13 requires the AVX CPU instruction set, which is not supported on this platform. To resolve this issue, upgrade the virtual host hardware compatibility or migrate the virtual machine to a host that supports AVX.

Distributed Architecture (DA) is enabled

Error message:

Distributed architecture is not yet supported in version 13.

Distributed Architecture is not yet supported in version 13. You cannot update while DA is enabled. If you enabled DA by mistake, disable it in Configuration Center → Distributed Architecture.

Virtual probes with existing flow data

Error message:

Cannot perform update of the Flowmon Virtual Probe containing flow data. This indicates a license inconsistency. Perform factory reset of the Monitoring Center or switch to Flowmon Collector license.

A Flowmon Virtual Probe cannot have any flow data present. The system has detected flow data, possibly because of an incorrect virtual appliance template or license type. You must either perform a factory reset of the Monitoring Center or switch to a Flowmon Collector license.

Insufficient free quotas for migrations

Error message:

Ensure that at least 'X' GiB is free in FCC Resource Manager before updating.

The Flowmon Data partition does not have enough free space for the post-installation data migration. You must lower the Collector quotas to create additional space.

Minimum required disk space for update:

• 17 GiB for system installation
• 3 GiB for alert, analysis, and investigation data (Collector only)
• 20 GiB for data backup
• 150 MB for each profile channel (Collector only)

Unable to estimate quota

Error messagge:

Unable to estimate required free quota for the update. Please contact us through the Support portal for assistance.

The system cannot calculate the required disk space. You must contact the Flowmon Support team to resolve this issue. Contact us through the Support portal.

Corrupted filesystem

Error message:

Preliminary filesystem check failed. It seems that your filesystem is corrupted. Please contact us via Support portal for assistance.

Failed to update because the filesystem check failed.

Unsupported module

Error message:

'Module' is no longer supported in Flowmon 13. Please remove it before the update.

The APM Transaction Generator and DDoS Defender modules are not supported in Flowmon 13. You must remove these modules before updating.

Unknown module

Error message:

Your appliance contains some nonstandard modules which are not supported in Flowmon 13. Please contact us via Support portal.

The system detected unknown modules on your appliance. These modules (which might be from a custom deployment or support case) are not compatible with Flowmon 13.

Virtual network driver e1000 is used for the VA

Error message:

The following network interfaces are using e1000 driver which is no longer supported in Flowmon 13: eth0 eth1 eth2 eth3. Please update VM hardware configuration to use VMXNET3 or virtio network adapters. Follow the instructions described in section Incompatible Interface Type on Virtual Appliance in the Flowmon 13 User Guide.

Flowmon 13 does not support the e1000 network interface. You must replace it with a compatible VMXNET3 or virtio network adapter. Update the VM hardware configuration to use a different network adapter type before updating Flowmon. To learn how to replace the virtual network interface without losing data, go to Incompatible Interface Type on Virtual Appliance.

Duplicate MAC addresses

Error message:

MAC address 'XYZ' is assigned to multiple network interfaces: int1, int2. Ensure each network interface has a unique MAC address before updating.

You cannot update Flowmon because the system detected duplicate MAC addresses on multiple network interfaces. This error can occur when you incorrectly configure network adapters while replacing incompatible e1000 interfaces. To resolve this issue, you must assign unique MAC addresses to each network interface in your hypervisor settings.

Unsupported external storage

Error message:

Any external storage mounted as /data2 is no longer supported in Flowmon 13. Please contact us via Support portal.

You cannot use external storage mounted as /data2 in Flowmon 13. You must migrate your data to a new appliance. Contact us through the Support portal for hardware replacement and migration assistance.

Not enough disk space for the update

Error message:

Data partition does not have enough free space - X needed, Y missing.

Failed to update Flowmon, because the data partition does not have enough free space for the installation process.

You must either:

• Lower the Collector quotas to create additional space, or
• On a virtual appliance, increase the data disk size. For information about resizing the data disk, go to Data Storage on a Virtual Platform.

Invalid profile detected

Error message:

These profiles are in an invalid state: p1, p2. The issue can be resolved by editing them and fixing validation issues.

The listed profiles (p1, p2, and so on) are currently in an invalid state, either because there are missing channels, they are based on a parent that no longer exists, or they are lacking some channels. To fix this, locate the profile under the correct tenant who owns and can edit it. Open each problematic profile, address all validation errors, and try saving it. If you can save the profile, the issue should be resolved and the update will no longer be blocked.

Invalid alert detected

Error message:

These alerts are in an invalid state: a1, a2. The issue can be resolved by editing them and fixing validation issues.

The listed alerts (a1, a2, and so on) are currently in an invalid state, either because they are based on a parent that no longer exists or they are lacking some channels. To fix this, locate the alert under the correct tenant who owns and can edit it. Open each problematic alert, address all validation errors, and try saving it. If you can save the alert, the issue should be resolved and the update will no longer be blocked.

Invalid chapter detected

Error message:

These chapters are in an invalid state: ch1, ch2. The issue can be resolved by editing them and fixing validation issues.

The listed chapters (c1, c2, and so on) are currently in an invalid state, either because they are based on a parent that no longer exists or they are lacking some channels. To fix this, locate the chapter under the correct tenant who owns and can edit it. Open each problematic chapter, address all validation errors, and try saving it. If you can save the chapter, the issue should be resolved and the update will no longer be blocked.

Not enough RAM

Error message:

Insufficient RAM for Flowmon with ADS installed X GB. Updating Flowmon with ADS module requires at least 12GB of RAM.

You cannot update Flowmon because the system does not have enough RAM for ADS. You must upgrade the RAM to at least 12 GB to use Flowmon with ADS.

The current Flowmon version is older than the minimum required for update

Error message:

Your current Flowmon version is too old to perform the update. Please update to at least version 12.5.8 first.

You cannot update Flowmon because the installed Flowmon version is older than the minimum required version. You must first update to a newer version. Go to Configuration Center > Versions and install the update from the available packages or upload the update package previously downloaded from the Flowmon Downloads page. For more information, refer to: Versions.

Duplicate user login detected

Error message:

There are duplicate users with the same login: "user1". Please contact us via Support portal for assistance.

You cannot update Flowmon because the system detected duplicate user logins. This issue would cause the configuration migration to fail during the update process. To resolve this issue, contact the Flowmon Support team. Contact us through the Support portal for assistance.

Active devices quota too small

Error message:

The active devices quota is too low. Increase the quota to at least X MiB.

The Active Devices quota in FCC Resource Manager is smaller than the actual space used. You must increase the quota to at least match the current usage. Go to Configuration Center > Resource Manager and increase the Active Devices quota to the value indicated in the error message.

Report chapters quota too small

Error message:

The report chapters quota is too low. Increase the quota to at least X MiB.

The Report Chapters quota in FCC Resource Manager is smaller than the actual space used. You must increase the quota to at least match the current usage. Go to Configuration Center > Resource Manager and increase the Report Chapters quota to the value indicated in the error message.

Profiled sources limit exceeded

Error message:

The number of profiled sources (X) exceeds the configured limit (Y). Increase the limit of source profiles in FMC Configuration - Sources.

The number of profiled sources on the system exceeds the configured limit. You must increase the limit of source profiles. Go to Configuration Center > FMC Configuration > Sources and increase the profiled sources limit.

Profiled interfaces limit exceeded

Error message:

The number of profiled interfaces (X) exceeds the configured limit (Y). Increase the limit of profiled interfaces in FMC Configuration - Sources.

The number of profiled interfaces on the system exceeds the configured limit. You must increase the limit of profiled interfaces. Go to Configuration Center > FMC Configuration > Sources and increase the profiled interfaces limit.

Expired Monitoring Ports certificate

Error message:

There is an expired Monitoring Ports certificate. Use new certificate in FCC - Monitoring Ports.

You cannot update Flowmon because the Monitoring Ports certificate has expired. You must replace the expired certificate with a valid one. Go to Configuration Center > Monitoring Ports and upload a new certificate.

Expired CA certificate

Error message:

There is an expired CA certificate. Use new certificate in FCC - System - Certificate Management.

You cannot update Flowmon because the CA certificate has expired. You must replace the expired certificate with a valid one. Go to Configuration Center > System > Certificate Management and upload a new certificate.

Expired IPsec certificate

Error message:

There is an expired IPsec certificate. Use new certificate in FCC - System - IPsec Service.

You cannot update Flowmon because the IPsec certificate has expired. You must replace the expired certificate with a valid one. Go to Configuration Center > System > IPsec Service and upload a new certificate.

Expired Listening Ports certificate

Error message:

There is an expired Listening Ports certificate. Use new certificate in FCC - FMC Configuration - Listening Ports.

You cannot update Flowmon because the Listening Ports certificate has expired. You must replace the expired certificate with a valid one. Go to Configuration Center > FMC Configuration > Listening Ports and upload a new certificate.

Expired Forwarding Targets certificate

Error message:

There is an expired Forwarding Targets certificate. Use new certificate in FCC - FMC Configuration - Forwarding Targets.

You cannot update Flowmon because the Forwarding Targets certificate has expired. You must replace the expired certificate with a valid one. Go to Configuration Center > FMC Configuration > Forwarding Targets and upload a new certificate.

Expired HTTPS certificate

Error message:

There is an expired HTTPS certificate. Generate or upload new certificate in FCC - System - Certificate Management.

You cannot update Flowmon because the HTTPS certificate has expired. You must generate or upload a new certificate. Go to Configuration Center > System > Certificate Management and either generate a new certificate or upload a valid one.

Unsupported HTTPS certificate signature algorithm

Error message:

The HTTPS certificate uses an unsupported signature algorithm (SHA-1, DSA, or MD-family). Generate or upload a new RSA or ECDSA HTTPS certificate signed with SHA-256 or stronger in FCC - System - Certificate Management.

The HTTPS certificate uses a weak or deprecated signature algorithm. Flowmon 13 requires certificates signed with SHA-256 or stronger. You must generate or upload a new RSA or ECDSA HTTPS certificate. Go to Configuration Center > System > Certificate Management and generate or upload a new certificate signed with SHA-256 or stronger.

Unsupported PostgreSQL server certificate

Error message:

The PostgreSQL server certificate is not supported in Flowmon 13. Generate new PostgreSQL certificate in FCC - System - Certificate Management.

Flowmon 13 requires the PostgreSQL server certificate to use a key size of at least 4096 bits. The current certificate uses a smaller key size. You must generate or upload a new PostgreSQL certificate in Configuration Center > System > Certificate Management before updating.

Management Interface configured with a localhost address

Error message:

Management interface 1 or 2 is configured with a localhost address (127.0.0.1 or ::1). Change the address in FCC - System - Management Interface 1 or 2.

You cannot update Flowmon because Management Interface 1 or 2 is configured to use a localhost address (127.0.0.1 or ::1). Localhost addresses cannot be used for Management Interfaces. You must change the Management Interface IP address to a valid non-localhost address or disable IP configuration. Go to Configuration Center > System > Management Interface 1 or Management Interface 2 and update the IP address settings or disable IP configuration.

Monitoring Port configured with a localhost address

Error message:

There is a Monitoring Port configured with a localhost address (127.0.0.1 or ::1). Change the address in FCC - Monitoring Ports.

You cannot update Flowmon because a Monitoring Port is configured to use a localhost address (127.0.0.1 or ::1). Localhost addresses cannot be used for Monitoring Ports. You must change the Monitoring Port IP address to a valid non-localhost address or disable IP configuration. Go to Configuration Center > Monitoring Ports and update the IP address settings or disable IP configuration.

Overlapping subnets for Management Interface 1 and 2 and Monitoring Ports

Error message:

Overlapping IPv4 subnets detected on the following interface pairs: eth0 and eth1 or eth0 and eth2. Ensure each network interface is assigned to a unique, non-overlapping subnet before updating.

You cannot update Flowmon because Management Interfaces or Monitoring Ports use overlapping subnets. You must reconfigure the IP configuration of Management Interfaces or Monitoring Ports so that each interface is assigned to a unique, non-overlapping subnet. Go to Configuration Center > System > Management Interface 1 or Management Interface 2 to update Management Interface addresses, or go to Configuration Center > Monitoring Ports to update Monitoring Port addresses.

Insufficient space for old data partition expansion

Error message:

Not enough free space on /data for expansion of old data partition: need X MiB, have Y MiB

The update process requires expanding the old data partition, but there is not enough free space on the /data partition. You must free up space on the /data partition. Go to Configuration Center > Resource Manager and lower quotas to free additional space, or remove unnecessary data.

Root disk too small for update

Error message:

Root disk for the Flowmon appliance must be expanded to at least 27 GiB first. Root disk is only X GiB

The virtual appliance root disk is too small to perform the necessary partition expansion during the update. You must expand the root disk to at least 27 GiB in the hypervisor settings and retry the update.

Unable to find old data partition

Error message:

Unable to find old data partition suitable for Flowmon 13 update. Please contact us via Support portal.

The update process requires an old data partition for the ISO destination, but no suitable partition was found. Contact the Flowmon Support team through the Support portal for assistance.

UEFI boot mode required on physical appliance

Error message:

Flowmon 13 requires UEFI boot mode on physical appliances with large storage. Please switch the system firmware to UEFI/EFI mode before updating.

Physical Flowmon appliances with data storage of 2 TB or more must boot in UEFI mode for Flowmon 13. The system is currently booting in BIOS (legacy) mode. You must switch the system firmware settings to UEFI/EFI boot mode and retry the update.

UEFI boot mode required but no EFI partition found

Error message:

Flowmon 13 requires UEFI boot mode on physical appliances with large storage, but no EFI partition was found on this system. Please contact us via Support portal.

Physical Flowmon appliances with data storage of 2 TB or more must boot in UEFI mode for Flowmon 13. The system is currently booting in BIOS (legacy) mode and no EFI partition was found, which may indicate older or unsupported hardware. Contact the Flowmon Support team through the Support portal for assistance.