topic Re: Upgrade Checkpoint in Azure cloud in Cloud Firewall

Upgrade Checkpoint in Azure cloud

Sanjay_S — Wed, 15 Jul 2020 16:03:31 GMT

Hi All,

We are planning to upgrade the Checkpoint in the Azure from R80.10 to R80.30.

Please let me know from where we can download the image and latest HF for the upgrade.

Kernel:

2.6.18

Thanks in advance.

Re: Upgrade Checkpoint in Azure cloud

HeikoAnkenbrand — Sun, 19 Dec 2021 10:20:33 GMT

Hi @Sanjay_S,

here are the azure upgrade links:

Solution Type	Upgrade	Link
Management and Gateway	Upgrade Machine	sk161015
Management	Upgrade Version	sk155632
Management	Increase Disk Size	sk156552
Gateway	Increase Disk Size	sk156552
VMSS	Upgrade Version	CloudGuard Network for Azure VMSS R80.10 and Higher Administration Guide (This link was edited by Check Point on 19 Dec 2021)
HA	Upgrade Version	CloudGuard Network High Availability for Azure R80.10 and Higher Deployment Guide (This link was edited by Check Point on 19 Dec 2021)
Cluster	Upgrade to HA	CloudGuard Network High Availability for Azure R80.10 and Higher Deployment Guide (This link was edited by Check Point on 19 Dec 2021)
Multi-Domain Server	Upgrade HA environment	sk154436

Re: Upgrade Checkpoint in Azure cloud

Sanjay_S — Thu, 16 Jul 2020 06:16:28 GMT

Hi Heiko,

Thank you for helping me with these SKs. I want to upgrade the security gateway to R80.10 to R80.30 so need similar SK as sk155632 for gateway. I searched for it but did not get any relevant one.

Re: Upgrade Checkpoint in Azure cloud

Dmitry_Gorn — Sun, 19 Jul 2020 07:55:15 GMT

Hi Sanjay,

If you wish to upgrade a single gateway, please do a side-by-side deployment and move traffic and configurations between the gateways.

We currently have an SK for AWS: sk118717. The steps for Azure side-by-side upgrade are similar and an SK for gateway upgrade in Azure will be published in the future.

If you have any issues during this procedure please contact support to get assistance.

Thanks,

Dmitry

Re: Upgrade Checkpoint in Azure cloud

scottikon — Thu, 12 Nov 2020 14:46:00 GMT

Hi Dmity,

Do you know if a SK was published for Azure side-by-side upgrade?

Kind Regards

Scott Pearson

Re: Upgrade Checkpoint in Azure cloud

TCheema — Thu, 18 Feb 2021 08:55:25 GMT

Hi All,

We are trying to upgrade a single Azure gateway from R80.30 to R80.40. I looks like this will have to be a side-by-side upgrade but where can we find the instructions and image?

Thanks,

Tina

Re: Upgrade Checkpoint in Azure cloud

Sanjay_S — Tue, 22 Mar 2022 08:31:54 GMT

Hi Heiko,

Could you please help me with the Azure Checkpoint side-by-side upgrade link if any. So that it will be helpful to proceed with the upgrade soon.

Regards,

Sanjay S

Re: Upgrade Checkpoint in Azure cloud

John_Richards — Tue, 28 Jun 2022 15:43:54 GMT

Is it now possible to upgrade a single azure GW (R80.40) to R81.10 using CPUSE or do you still have complete a side-by-side deployment? It was my understanding something was to be released in late June to allow this. Thanks

Re: Upgrade Checkpoint in Azure cloud

PhoneBoy — Tue, 28 Jun 2022 17:20:48 GMT

I don't believe we've released images that support an in-place upgrade yet.

Re: Upgrade Checkpoint in Azure cloud

Mark_Halsall — Tue, 28 Jun 2022 19:16:01 GMT

Soon...

Re: Upgrade Checkpoint in Azure cloud

avivs — Wed, 29 Jun 2022 07:01:05 GMT

Just in - In-place upgrade for Azure is now released.

Upgrade packages, supported upgrade flows, versions and configurations are available in sk177714 - CloudGuard for Public Cloud In-Place upgrade packages

We will be more than happy to receive feedback or requests.

Re: Upgrade Checkpoint in Azure cloud

PhoneBoy — Wed, 29 Jun 2022 21:28:20 GMT

What was released was the ability to upgrade gateways in place.
Management (which includes Standalone deployments) still cannot be upgraded in-place per sk177714.

Re: Upgrade Checkpoint in Azure cloud

avivs — Thu, 30 Jun 2022 06:30:03 GMT

Right.

Per OP's question, in-place upgrade for Gateways can be done per sk177714.

In-place upgrade for CGNS management instances is a roadmap item.

I hope we will be able to announce CGNS in-place upgrade for managements as well in the near future.

Re: Upgrade Checkpoint in Azure cloud

rionetwork — Sun, 05 Feb 2023 12:25:11 GMT

Hi Sanjay,

I below post we see you mentioned you were able to successfully upgrade. We are doing the same in our environment , hence if you can share the step u followed for upgrade it will be great and help to achieve same in our environment.

Waiting to hear from you.

Thanks,

Sunit Panday

Re: Upgrade Checkpoint in Azure cloud

Sanjay_S — Wed, 08 Feb 2023 06:59:47 GMT

Hi Sunit,

It is always better to go with In-Place upgrade. I followed the below steps because there was no in place upgrade when i upgraded it.

Regards,

Sanjay S

Re: Upgrade Checkpoint in Azure cloud

rionetwork — Wed, 08 Feb 2023 07:09:27 GMT

HI Sanjay,

May be your forgot to add the steps. Please help to add the Steps u followed.

May be if you can share your email we can discuss over there as well.

Thanks,

Sunit Panday

Re: Upgrade Checkpoint in Azure cloud

kritik — Mon, 08 May 2023 09:38:49 GMT

Dear avivs

Thank you for all the information shared regarding this procedure.

By following it until now, we ve reached in the below package "azure_blink_image_1.1_Check_Point_R81.10_T335_JHF_T87_SecurityGateway.tgz"

in an attempt to in place upgrade a R80.30 cluster

After uploading the package to gateway via Gaia, in the package verification step, we receive the below message:

"Upgrade: Upgrade is allowed. The Dynamic Deployment Rules engine failed. Contact Check Point Technical Services for further assistance."

Could not find any relative information regarding the "Dynamic Deployment Rules engine". Does this ring any bell or should I open a ticket?

Thank you.

Re: Upgrade Checkpoint in Azure cloud

_Val_ — Mon, 08 May 2023 09:56:25 GMT

As the error message suggests, please open a TAC case: https://help.checkpoint.com

Re: Upgrade Checkpoint in Azure cloud

Shira — Thu, 28 Dec 2023 07:56:38 GMT

Hi Rionetwork,

If you have done side by side upgradation can you please share the steps you followed.

@Sanjay_S, will be helpful if can share the steps you followed