topic Re: Cloudguard upgrade in Azure in Cloud Firewall

Cloudguard upgrade in Azure

Gaurav_Pandya — Tue, 14 May 2024 14:59:00 GMT

Hi Mates,

We are planning to upgrade Cloudguard firewall running R80.30 in Azure environment to R81.20. Some documentation show that you can upgrade using CPUSE while others say you need to create a new VM and migrate to the new VM.

TAC is suggesting to upgrade using CDT even though it is single firewall. Can I have some more feedback on it?

Thanks in advance.

Re: Cloudguard upgrade in Azure

Alex- — Tue, 14 May 2024 15:18:04 GMT

You can check sk132192 and sk177714 for the relevant images.

I did an upgrade from R81 to R81.10 using CPUSE with Blink on a IaaS gateway managed by Smart-1 Cloud.

The image was imported, the verifier returned an OK and the process was started. At the very end, we got an error message stating it was failed and we should contact support so we thought the image was lost and got ready to redeploy it.

We did try a reboot to see if at least it would boot OK on R81 and actually after reboot it started with R81.10 and the hotfix and runs OK since.

Also, refer to this thread: https://community.checkpoint.com/t5/Cloud-Network-Security/Upgrade-Azure-CloudGuard-IaaS-Single-Gateway/m-p/179235

Re: Cloudguard upgrade in Azure

the_rock — Tue, 14 May 2024 16:41:54 GMT

You can, BUT, catch is this. Upgrade to R81.10 first, then use link for R81.20 upgrade once you are on R81.10

Andy

https://support.checkpoint.com/results/sk/sk177714

Re: Cloudguard upgrade in Azure

Gaurav_Pandya — Tue, 14 May 2024 17:19:11 GMT

Ok thanks. I will check that sk

Re: Cloudguard upgrade in Azure

the_rock — Tue, 14 May 2024 17:20:14 GMT

Definitely. Before, upgrade was NOT possible for the gateways, you had to spin the new instance, so this makes it much easier.

Andy