Updating Bandura Cyber ThreatBlockr Software Without Unexpected Failover

This document covers the steps of updating the Bandura Cyber ThreatBlockr software without causing any unexpected network failover with your ASA’s. The bridge pairs of the Bandura Cyber ThreatBlockr will be referred to as BR0 and BR1, and the corresponding ASA’s will be referred to as ASA0 and ASA1, as shown in the network diagram below.

Log into the Bandura Cyber ThreatBlockr and navigate to Settings > Bypass. Set the BR0 - Startup Mode and BR1 - Startup Mode value to “Bypass” and click on Submit.

Determine which ASA is passive and which ASA is active. You will also need to determine which ASA is connected to which ThreatBlockr interface, which may require some cable tracing. Place the Bandura Cyber ThreatBlockr interface that corresponds with the passive ASA into bypass mode.

Example: If ASA0 is passive and ASA1 is active, the corresponding ThreatBlockr interface, BR0, will be placed into bypass mode.

After you have placed the corresponding Bandura Cyber ThreatBlockr interface into bypass mode, you will need to make the passive ASA active. Place the Bandura Cyber ThreatBlockr interface that corresponds with the newly passive ASA into bypass mode.

Example: If ASA1 was active, change ASA0 to active and place the Bandura Cyber ThreatBlockr interface that corresponds with the newly passive ASA, BR1, into bypass mode.

Update the Bandura Cyber ThreatBlockr software. Software can be downloaded in your GMC portal. Once the software is downloaded, log into the Bandura Cyber ThreatBlockr and click on Update Software. Upload the file and install the new software.

Once the software is successfully installed, you will need to take the Bandura Cyber ThreatBlockr interfaces out of bypass mode one by one. Place the passive ASA’s corresponding Bandura Cyber ThreatBlockr interface back into normal mode.

Example: If ASA1 is passive, place BR1 back into normal mode.

After you have placed the corresponding Bandura Cyber ThreatBlockr interface back into normal mode, you will need to make the passive ASA active. Place the Bandura Cyber ThreatBlockr interface that corresponds with the newly passive ASA back into normal mode.

Example: If ASA1 was active, change ASA0 to active and place the corresponding interface, BR1, back into normal mode.

Log into the Bandura Cyber ThreatBlockr and navigate to Settings > Bypass. Set the BR0 - Startup Mode and BR1 - Startup Mode value to “Normal” and click on Submit.