Citrix SD-WAN

Single-step upgrade for SD-WAN appliances


To use single step upgrade feature, the MCN must run a version which supports single step upgrade. For example, Citrix SD-WAN release version 9.3.x or newer.

A single step upgrade package using the SD-WAN GUI change management option to upgrade non-SD-WAN components in the network for all applicable platform editions is introduced. The MCN distributes all necessary software components to the sites (Branch) in the network.

After the branch receives the upgrade component files, these can be installed at scheduled time intervals as specified by the user. If the scheduled time is not specified, it uses the default time which is set by MCN for all branches.

The MCN also generates packages for sites on demand. Download the active package from the active hyperlink.  You can bring or boot strap a new site into the network using the downloaded active package.


Change management upload error occurs, if you attempt to perform single step upgrade (ctx-sdw-sw-<version-number>.zip file) from previous release versions (8.1.x, 9.0.x, 9.1.x, 9.2.x).

Upload (Single Step Upgrade Package) file if you are currently running release version 9.3.3 or newer.

Follow these procedures to upgrade:

Upgrade to 10.0 with working Virtual WAN configuration

Upgrade to 10.0 without working Virtual WAN configuration

Supported upgrade and downgrade scenarios

Following are the supported upgrade and downgrade scenarios for SD-WAN SE (Standard Edition) and PE (Premium Edition) appliances. It is assumed that we are upgrading Virtual WAN software first and then upgrading the other components after the required software is staged at the branch sites or on the MCN.

Factory shipped appliances

You can download local change management package from MCN and apply it on the factory shipped appliance. After the local change management package is applied to the branch site boxes, all relevant components are upgraded immediately without waiting for maintenance window, if applicable.

Appliances with legacy Virtual WAN software

  1. The appliances currently in an active network with virtual paths up and running.

    • The appliances receive packages from MCN. The components are installed and all files from MCN are received, and are available in the scheduled time window.
  2. The appliances are currently out of the network with virtual paths down.

    • This process is similar to upgrading appliances which are factory shipped. You need to download local change management from MCN and upload the software package to the branch site appliances.

Appliances with single-step upgrade support

The appliance stages multiple files applicable at the branch site based on the appliance model and platform edition. The version information is reported by the branch site and/or configuration options, if applicable. The branch site appliances perform the upgrade utilizing the staged files. The non-Virtual WAN software components can be installed based on the preferences, manual and/or schedule.

Version switch or revert

Downgrading to a previous version of Virtual WAN software is supported. With single step upgrade process, you can install WANOP software packaged with a given Virtual WAN software version. You can only upgrade hotfix and/or SVM versions, if the software versions in the packages are higher.

Single step upgrade to legacy virtual WAN software support

You can reinstall the legacy software with the required configurations (using tar.gz files).

Downgrade to previous software version:

If you upgraded an existing software version to release version 10.1 using the tar.gz upgrade process, you can downgrade the software version to a previous software version.

If you used the .zip (single step upgrade) procedure to upgrade to version 10.1, you cannot downgrade the software version to a previous software version.

Single-step upgrade in high availability deployment mode:

During single step upgrade if high-availability flip occurs, then you need to switch back to the old primary appliance manually, or upload the single bundle package to the new primary appliance.

Single-step upgrade for SD-WAN appliances