topic Re: CloudGuard Upgrades support in Cloud Firewall

CloudGuard Upgrades support

Don_Paterson — Thu, 28 Apr 2022 14:34:22 GMT

Hello Check Mates and Cloud Mates,

Anyone got the latest on upgrading SMS and/or SGs and Clusters in public cloud?

I know is has been technically blocked to do major version upgrades but I understand that was something that might change in Q4 2021.

Thanks,

Don

Re: CloudGuard Upgrades support

Don_Paterson — Thu, 28 Apr 2022 14:56:14 GMT

Update:
This SK is very good for reference for public cloud upgrades (bigger VMs, bigger disks and version upgrades).

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162365

It is implied that technical upgrades of major versions are still not supported in public cloud.

Another interesting point. Not a new topic but still interesting:
If an R81 SMS gets JHFA TAKE 42 then in theory it can manage an R81.10 SG

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk113113&partition=Basic&product=Multi-Domain

Re: CloudGuard Upgrades support

Chris_Atkinson — Thu, 28 Apr 2022 15:07:23 GMT

sk177714: CloudGuard for Public Cloud In-Place upgrade packages

I believe similar is also imminent for Azure as it is for AWS.

Re: CloudGuard Upgrades support

StuartGreen — Thu, 28 Apr 2022 15:08:30 GMT

Hey Don,

For AWS gateways this is available now using CPUSE (https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk177714) as an in-place upgrade. Azure gateways are due any time now but this has been pushed back a few times so don't hold me to that 😉

Management is coming around H2 I believe (but side-by-side upgrades for management tend to be easier so probably not as urgent).

Stu

Re: CloudGuard Upgrades support

Don_Paterson — Thu, 28 Apr 2022 15:19:56 GMT

Superb.
Thanks Stu

I could ask the SK team to add R81.10 to the top of that SK (Version field) and also link this SK -> sk155632 but I have Feedback spammed them enough this week (and proved humanity) so I can only suggest it in here 🙂

Regards,

Don

Re: CloudGuard Upgrades support

Don_Paterson — Thu, 28 Apr 2022 15:20:49 GMT

Thanks Chris. Much appreciated. 🙂

Re: CloudGuard Upgrades support

PhoneBoy — Thu, 28 Apr 2022 15:50:35 GMT

See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk177714
TL;DR: You have to use specific images to perform the upgrades.

Re: CloudGuard Upgrades support

Don_Paterson — Thu, 28 Apr 2022 15:53:05 GMT

And I see that they are Blink images. 🙂

aws_blink_image_1.1_Check_Point_R80.40_T294_JHF_T139_SecurityGateway.tgz

aws_blink_image_1.1_Check_Point_R81_T392_JHF_T44_SecurityGateway.tgz

aws_blink_image_1.1_Check_Point_R81.10_T335_JHF_T30_SecurityGateway.tgz

Thanks Dameon.

Don

Re: CloudGuard Upgrades support

StuartGreen — Thu, 28 Apr 2022 19:45:58 GMT

oh sorry @Chris_Atkinson - I missed your reply basically saying the same thing. Must have left the tab open too long before managing to type a post 🙂

Re: CloudGuard Upgrades support

Hezi_Bahry — Tue, 14 Jun 2022 08:55:05 GMT

Hi,
Right now, in-place upgrade (IPU) of security GWs on static constructs (non-scale sets) is supported on AWS (released 2 months ago) and Azure (release is planned for this week). The IPU process is enabled for any SRC to any DST starting at R80.30 and above on released versions (versions under EA are not supported).
Management in place upgrade is not supported yet, it is on the roadmap for end of Q3.

Please visit this resource for further exploration - IPU

Hezi

PS - feel free to contact me at hezib@checkpoint.com

Re: CloudGuard Upgrades support

John_Richards — Mon, 20 Jun 2022 16:28:18 GMT

Is there any ability to do in-place upgrade of single GW's in Azure currently? The above doc is only for AWS.

Re: CloudGuard Upgrades support

Hezi_Bahry — Mon, 20 Jun 2022 18:32:04 GMT

The in place upgrade was supposed to be released this week, unfortunately, delayed to next week. If you need this urgently, where the target version is R80.40, please mail me privately. If you can wait another week, the new timeline for the release is June 28.

Hezi

Re: CloudGuard Upgrades support

John_Richards — Mon, 20 Jun 2022 18:45:13 GMT

So the GW is R80.40 and want to go to R81.10 but told not possible to in place upgrade. I can wait till after the 28th.

Re: CloudGuard Upgrades support

avivs — Wed, 29 Jun 2022 07:00:56 GMT

Just in - In-place upgrade for Azure is now released.

Upgrade packages, supported upgrade flows, versions and configurations are available in sk177714 - CloudGuard for Public Cloud In-Place upgrade packages

We will be more than happy to receive feedback or requests.

Re: CloudGuard Upgrades support

John_Richards — Wed, 29 Jun 2022 14:15:34 GMT

Thanks for this. Will provide feedback as we upgrade move to upgrade customers. This will certainly make things easier.