topic Re: AWS SMS and GW Ugrades in Cloud Firewall

AWS SMS and GW Ugrades

anettekr — Wed, 25 Oct 2023 10:03:07 GMT

Morning,

i'm just hoping someone will be able to clarify for me.

i'm prepping to upgrade an AWS CP Manager and a separate gateway to R81.10. i will be using the in-place upgrade method from sk177714. Question i have is the link for R81.10, is the aws install and upgrade package the same for the gateway and the manager? or should there be a separate one for each.

i have imported them both and ran a verification on the Manager and on the Gateway but just hoping someone can clarify.

Many thanks,

Anette

Re: AWS SMS and GW Ugrades

G_W_Albrecht — Wed, 25 Oct 2023 11:58:57 GMT

According to sk177714 that should be ok. You can open an informational SR# with CP TAC to get an official answer !

Re: AWS SMS and GW Ugrades

Amir_Senn — Wed, 25 Oct 2023 14:49:16 GMT

Yes, we moved to one package for both management and gateways and it is safe to use.

Re: AWS SMS and GW Ugrades

the_rock — Wed, 25 Oct 2023 14:51:23 GMT

@Amir_Senn ...just to confirm, when it comes to Azure, its still not possible to do in place upgrade for gateways, right?

Andy

Re: AWS SMS and GW Ugrades

Amir_Senn — Wed, 25 Oct 2023 15:04:04 GMT

Actually it is supported. Supports upgrade of MGMT, MDS, secondary MGMT/MDS, single GW and clusters.

Doesn't support Azure VMSS.

Re: AWS SMS and GW Ugrades

the_rock — Wed, 25 Oct 2023 15:05:11 GMT

Thats what I thought, as thats also what Professional services told us.

Cheers,

Andy

Re: AWS SMS and GW Ugrades

Chris_Atkinson — Wed, 25 Oct 2023 15:27:20 GMT

I assume for the VMSS piece their is a missing hook on the Azure end, comparably with AWS Auto-scale groups for example their appears to be a means of changing the template.

By all means if someone knows better than I regarding the above please call it out?

Re: AWS SMS and GW Ugrades

the_rock — Wed, 25 Oct 2023 15:22:24 GMT

Management piece is fine for in place upgrade, but just not gateways...we verified that with PS and one of your main cloud architects as well. This is specifically for Azure vmss.

Cheers,

Andy

Re: AWS SMS and GW Ugrades

Amir_Senn — Thu, 26 Oct 2023 06:48:39 GMT

Basically we deploy a new VMSS side by side migrate traffic to it. There's a guide how to do it step by step:

https://sc1.checkpoint.com/documents/IaaS/WebAdminGuides/EN/CP_VMSS_for_Azure/Content/Topics-Azure-VMSS/Additional-Information.htm?tocpath=Additional%20Information%7C_____0#Upgrading_the_CloudGuard_VMSS_Solution