Even a legitimate full-upgrade package may overwrite network firewall rules or SSH configurations. Before upgrading, isolate the DTEN device on a management VLAN. After upgrade, audit:
