MHF/RHF patch, what is it and how is it installed ?


This article applies to:

  • SWG v10.x
  • SWG v11.x

Question:

  • What are the differences between MHF and RHF patches ?
  • How should these patches be installed ?
  • Is there any specific order of installation ?

Information:

MHF patch is a Maintenance Hot Fix, mainly addressing issues of the Policy Server role in SWG OS.
RHF patch is a Run-time Hot Fix, addressing issues of the Scanning Server role in SWG OS.

These patches are installed as local updates, refer to below KB article for installation procedure guidelines:
Q13868: Install local updates on SWG appliances
Q14452: .fup installation for SWG

There are no internal dependencies between MHF and RHF patches, no specific order of installation is required.
These patches are cumulative, and newer version of MHF/RHF patch will include the libraries included in the previous version of the MHF/RHF patch, respectively.

Patch usually consists of Debian libraries that are being updated from version to version, as shown below for example:



The patch is always installed first on the Policy Server and then the Policy Server is responsible to update internally the scanner(s) managed by this Policy Server.
The installation order is also similar in the case of HA Policy Server, once the patch is installed on the Active Policy Server, it will also be installed on the Backup Policy Server.

Refer to the below KB articles for the links to the most recent patches for different SWG OS versions:
SWG v10.2 - Q16783
SWG v11.0 - Q16784
SWG v11.5 - Q16785

Last Modified 4/23/2014.
https://support.trustwave.com/kb/KnowledgebaseArticle16782.aspx