This article explains how Security Director Cloud performs software upgrades on managed devices, including standalone devices, chassis clusters, and vSRX clusters.

Security Director Cloud upgrades devices using the following methods:

1. Single Chassis / Standalone Devices

• A standard/normal upgrade process is used. Device temporarily stops forwarding traffic while the upgrade occurs.

2. Chassis Clusters (SRX Series Firewalls)

• Devices can be upgraded or downgraded using:
  • In-Band Cluster Upgrade (ICU), or In-Service Software Upgrade (ISSU) for minimal traffic disruption.

3. vSRX Virtual Firewall Clusters

• SD Cloud automatically determines whether to perform an ISSU or a manual node-by-node upgrade, based on cluster conditions.

4. Device Reboot

• Devices automatically reboot after the image upgrade completes.

5. Post-Upgrade Sync

• After the device reconnects, SD Cloud re-synchronizes with the upgraded device.

See Upgrading Devices in a Chassis Cluster Using ICU for details about ICU and Upgrading a Chassis Cluster Using In-Service Software Upgrade for details about ISSU

Additional Notes

• You can select multiple devices to deploy the upgrade image at the same time.
• Upgrades can be scheduled for immediate or later deployment.
• Each device upgrade is triggered and processed individually, even when selected together.
  
  

If you face any further issues, please contact JUNIPER JTAC Support for assistance.