Roll Back Device Image

You can roll back the current image deployed on a device to its preceding version, also known as a backup image. The backup image version might be earlier or later than the current version. You can roll back the image on standalone devices, clusters, or Multinode High Availability (MNHA) pair devices that are onboarded and connected to Juniper Security Director.

You can roll back up to 10 devices at once. The rollback process can temporarily disrupt the network traffic, as the devices automatically reboot to complete the rollback. So, we recommend that you initiate the rollback during their maintenance period.

Before You Begin

Onboard your SRX Series Firewalls to Juniper Security Director. See Onboard SRX Series Firewalls to Juniper Security Director.
Make sure your SRX Series Firewall have a backup image. The rollback process fails if:
- The device doesn’t have a backup image.
- Cluster devices have different backup images.
- Cluster devices run different images after the rollback process.

To roll back the device image:

Click Inventory > Devices.
Select one of the following types of devices:
- Standalone devices
- Clusters
- Specific devices in a cluster
- MNHA pair devices
- Specific devices in an MNHA pair
Click More, and then click Rollback Devices.
The Rollback Devices page is displayed.

Depending on the selected MNHA pairs or devices in an MNHA pair and their operational status, you will see following options in the Rollback Devices page:
- MNHA pair selected and both devices UP—If you selected an MNHA pair and the operational status of both devices are UP, the pair is displayed on the page with both devices shown.
- One device in an MNHA pair UP—If you selected only one device from an MNHA pair and its status is UP, the pair is displayed along with the selected device.
- Both devices in an MNHA pair UP individually—If you selected both devices individually from an MNHA pair and their status is UP, the pair is displayed on the page with both devices shown.
- MNHA pair with one device DOWN—If you selected an MNHA pair and one device is DOWN, an error message is displayed and the Rollback Devices page is not displayed.
- One device in MNHA pair DOWN—If you selected only one device from an MNHA pair and its status is DOWN, an error message is displayed and the Rollback Devices page is not displayed.
Depending on the selected clusters or devices in a cluster and their operational status, you will see following options in the Rollback Devices page:
- Cluster selected and both devices UP—If you selected a cluster and the operational status of both devices are UP, the cluster is displayed on the page with both devices shown.
- One device in a cluster UP—If you selected only one device from a cluster and its status is UP, the cluster is displayed along with the selected device.
- Both devices in a cluster UP individually—If you selected both devices individually from a cluster and their status is UP, the cluster is displayed on the page with both devices shown.
- Cluster with one device DOWN—If you selected a cluster and one device is DOWN, the cluster is displayed on the page with both devices shown. When a device is DOWN, the Previous Image Version column displays "Failed to Load".
- One device in cluster DOWN—If you selected only one device from a cluster and its status is DOWN, an error message is displayed and the Rollback Devices page is not displayed.
In the Rollback Devices page, review the device name, current and previous image version information displayed.
To remove a device from the list, select the device, and click Remove.
To initiate the rollback process, click OK. A job is created, and the rollback process is initiated. Click Admin > Jobs to view and track the job progress.

During the rollback, Down status is displayed in the Management Status column for the devices. Once the rollback is successfully completed, UP status is displayed in the column.