Upgrade the CN-Series Firewall—Redeploy

—Delete your existing CN-Series firewall deployment and replace the existing deployment completely. In this workflow, you must plan for a longer maintenance window because all the firewalls will be offline at the same time, and all the secured application traffic will be impacted until the firewalls pods are up again.

Upgrade the CN-Series Firewall—Rolling Update

—Use the new version to deploy a new CN-MGMT statefulset and service in the cluster, so you have two pairs of CN-MGMT pods running simultaneously while you perform a rolling upgrade of the CN-NGFW pods on each node. When the CN-NGFW pod is upgraded it registers to the new CN-MGMT pods and when the process completes for all secured nodes in your cluster, you can delete the old CN-MGMT statefulset and service in the cluster.