Challenge 35 Security Begins & Never Ends with Updates: Networking Edition - korzynski/NICE-Challenge GitHub Wiki

Task list

  • Update VyOS router (172.16.0.1)
    • ISO is on Fileshare (172.16.30.32) at /home/samba/dasShare
  • Update pfSense Firewall (172.16.30.2)
  • Keep downtime minimal

pfSense

From Security-Desk

  • Log onto web interface at http://172.16.30.2
  • In Version section under System information, click next to Update Available
    • Installed version is 2.1.2-RELEASE
    • New version is 2.3.5-RELEASE
    • Enable Perform full backup prior to upgrade
    • click Invoke auto upgrade
  • Wait for reboot. Log in and verify version 2.3.5-RELEASE

VyOS

From Security-Desk

  • SFTP to 172.16.30.32
    • navigate to /home/samba/dasShare
    • get vyos-1.1.8-amd64.iso
  • SFTP to 172.16.0.1
    • put vyos-1.1.8-amd64.iso
  • SSH to 172.16.0.1
    $ show system image
    1: 1.1.7 (default boot) (running image)
    2: old-non-image-installation
    $ add system image ./vyos-1.1.8-amd64.iso
  • show system image to verify the new image is default boot
  • $ reboot
  • show system image to verify the new image is running image