Updates & Maintenance

NetGuard uses Ed25519-signed update packages (.vgupdate) for secure, tamper-proof firmware updates. The appliance checks for updates automatically and supports manual uploads for air-gapped environments.

Automatic update checks

The appliance checks for new updates daily at 03:00 UTC. When an update is available, a notification appears on the Settings page.

You can also check manually at any time from Settings > Updates > Check for Updates.

Applying an update

1. Check for updates

   Go to Settings > Updates and click Check for Updates. If a new version is available, the version number and release notes are displayed.

2. Download

   Click Download. The appliance downloads the update package and verifies its Ed25519 signature and per-file SHA-256 hashes before staging it.

3. Apply

   Click Apply. The appliance:

   • Backs up current binaries to a rollback directory
   • Installs the new binaries
   • Restarts the NetGuard service
   • Monitors stability for 60 seconds

   The dashboard reconnects automatically once the service restarts.

Tip

Your VPN connection and Remote Access peers reconnect automatically after the service restarts. No manual intervention is needed.

Manual upload

For appliances without internet access, you can upload an update package directly:

1. Download the .vgupdate file on another computer
2. Go to Settings > Updates
3. Use the Upload Package field to select the file
4. The appliance verifies the signature and stages the update
5. Click Apply to install

Automatic rollback

If the service fails to start after an update, the appliance automatically rolls back to the previous version. The rollback happens within 60 seconds and requires no user action.

Check Settings > Updates after a failed update to see the result status and any error details.

Troubleshooting

“Signature verification failed”

• The update package may have been corrupted during download. Re-download and try again.
• If uploading manually, ensure the file was transferred in binary mode (not text mode).

Update stuck on “Applying”

• The service may be restarting. Wait up to 60 seconds and refresh the page.
• If the dashboard doesn’t come back, access the console (VM direct access) and check the service status with option 3) System Status.

Dashboard shows old version after update

• Clear your browser cache or hard-refresh the page (Ctrl+Shift+R / Cmd+Shift+R).
• The embedded web UI is part of the binary — a successful update always includes the latest dashboard.