topic Re: How to update a GW Azure in Cloud Firewall

How to update a GW Azure

RemoteUser — Fri, 16 May 2025 14:27:43 GMT

Hi all,
I'm running a Check Point gateway in Azure with version R81.20, and I need to upgrade it from one Jumbo Hotfix Take to another. (Maybe the reccomended)
What is the recommended procedure to perform this update in a cloud environment like Azure?
Are there any specific considerations or best practices I should follow?

Thanks in advance for your support!

Re: How to update a GW Azure

Don_Paterson — Fri, 16 May 2025 14:59:28 GMT

The first link is a key SecureKnowledge article to reference for CloudGuard Network Security in general. The ones below that are good too.

You should find everything you need them, including best practice.

There is the option to deploy a new replacement image from the marketplace (which includes the hotfix) but that takes more planning.

Central Deploy or CPUSE/DA is a good way to go.

https://support.checkpoint.com/results/sk/sk173705

https://support.checkpoint.com/results/sk/sk109141

https://support.checkpoint.com/results/sk/sk132192

https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Installation-Uninstall.htm?tocpath=_____8

Re: How to update a GW Azure

Duane_Toler — Fri, 16 May 2025 15:40:08 GMT

Jumbo HFA for R81.20 can be updated just like any other gateway using whatever method you prefer. The coordination of the downtime is up to you and your requirements.

Re: How to update a GW Azure

Lesley — Fri, 16 May 2025 18:06:16 GMT

Same as a normal gateway. Maybe worth to make backup/snapshot on Azure level for quick rollback

Re: How to update a GW Azure

Amir_Senn — Sat, 17 May 2025 09:59:16 GMT

You got very good answers from all the best people here, I would just like to add some additional info and recommendations and tips:

The only thing that's actually different between on-premise based solution is the upgrade package. We have a dedicated package for upgrade found in first SK below. Just keep in mind for the future. I also believe that this will be eliminated as well in the future.
From my experience, the other most noticeable difference is the partition size. In order to keep costs for you as low as possible, the default storage size for our solution is 100 GB. You can increase it during deployment if you wish to suit your needs. I would take this into consideration the next time you install a new Azure solution or increase the amount of storage for existing solution. SK for increasing storage can also be found below. Upgrade packages are imported to /var/log partition.
My preferred procedure for upgrading/installing JHF is by using CDT, very powerful tool IMO. For simplicity, I recommend installing the JHF from SmartConsole. I ripped off GIF from sk168597 to show how simple it is:

In-Place Upgrade packages for CloudGuard Network: https://support.checkpoint.com/results/sk/sk177714

How to increase the disk size of a CloudGuard VM for Azure, AWS, GCP, and OCI: https://support.checkpoint.com/results/sk/sk156552

Central Deployment Tool (CDT): https://support.checkpoint.com/results/sk/sk111158

Re: How to update a GW Azure

the_rock — Sat, 17 May 2025 12:31:55 GMT

Ola bro,

Everyone is 100% right. You just do it normal way, like you would on say 9300 model via web UI. I just did one recently in Azure like that.

Andy

Re: How to update a GW Azure

RemoteUser — Sun, 18 May 2025 08:56:53 GMT

Thank you all for the thorough answers. It’s just as I imagined, my only concern was whether, being in the cloud, there might be special Jumbo updates or dedicated links to download them, similar to how it works with their images.
But you've now clarified that they can be upgraded just like regular gateways.

Re: How to update a GW Azure

the_rock — Sun, 18 May 2025 21:34:53 GMT

Glad we can help bro!

Andy