IBM QRadar

Hey all,

I wanted to post that we've seen some users experience extended maintenance windows when upgrading to QRadar 7.4.3 Fix Pack 4. This issue has only been reported on users going from pre-7.4.2 or earlier versions to QRadar 7.4.3 Fix Pack 4 at this time. However, we are asking users who plan to upgrade with multiple NAT groups enabled to have support confirm your logs before you start your upgrade to 7.4.3 Fix Pack 4.

When the upgrade attempts to patch the host in a multi-distributed NAT network (i.e. multiple NAT groups), the upgrade can take a considerable amount of time to complete. We've seen appliances taking up to 24 hours to upgrade, which is not expected due to the accessibility of the host's private IP in the deployment when the private IP is not accessible from the Console.

A technical note is available for users here: https://www.ibm.com/support/pages/node/6525408.

If you are unsure or have questions, feel free to ask here or open a case. The scope of this issue appears to be limited, but we wanted to be proactive on this issue and issue forum posts and a technical note. As more information becomes available, we'll update everyone.

- Jonathan