topic Re: Azure CP VMSS upgrade packages? in Cloud Firewall

Azure CP VMSS upgrade packages?

the_rock — Thu, 14 Sep 2023 20:47:09 GMT

Hey guys,

I just need to confirm something. Are there packages available to upgrade to R81.20 on Azure CP vmss platform? I know in-place upgrade is not possible, but based on below, does not look packages listed would work in vmss either

https://support.checkpoint.com/results/sk/sk162365

https://support.checkpoint.com/results/sk/sk177714

https://community.checkpoint.com/t5/Security-Gateways/Upgrading-VMSS-GW-s/m-p/157186

Supported Configurations

R80.30 and higher.
Autoscale / VMSS / MIG & Standalone deployments are not supported.
Upgrading of AWS GeoCluster to R81.20 is not supported.

Thanks!

Andy

Re: Azure CP VMSS upgrade packages?

Chris_Atkinson — Fri, 15 Sep 2023 02:31:02 GMT

To my knowledge this remains a side-by-side installation, refer:

CloudGuard Network for Azure VMSS R80.10 and Higher Administration Guide - Upgrading the CloudGuard VMSS Solution

Re: Azure CP VMSS upgrade packages?

the_rock — Fri, 15 Sep 2023 11:48:15 GMT

Thanks Chris. So is it official CP answer that any sort of upgrade on Azure vmss is NOT supported or should we open TAC case to confirm?

Andy

Re: Azure CP VMSS upgrade packages?

the_rock — Sat, 16 Sep 2023 12:15:21 GMT

Based on what my colleague Rahul and I found, we are fairly sure upgrade is not supported yet, but we opened an official TAC case anyway, so lets see what they say.

Thanks @Chris_Atkinson

Re: Azure CP VMSS upgrade packages?

the_rock — Mon, 18 Sep 2023 16:44:36 GMT

Just to update on this, TAC guy had gotten back to me and indicated exact same link as @Chris_Atkinson , so definitely not possible to upgrade atm. Little disappointing, but o well, hope it comes soon : - )

Andy

Re: Azure CP VMSS upgrade packages?

Nir_Shamir — Tue, 19 Sep 2023 04:37:06 GMT

Not exactly, let me give you the scenario.

you upgrade your VMSS GWs to R81.20 and they work well. the next day you get another instance deployed automatically but it's deployed in your previous version because your VMSS template is still configured on the original version you created it on.

so in-place upgrade isn't supported because it won't help you with AutoScale deployments. that is why you need to create a new VMSS with the new version so any future auto-deployments will be with your desired version.

And we can't change the version in the already deployed VMSS.

Re: Azure CP VMSS upgrade packages?

the_rock — Tue, 19 Sep 2023 11:30:33 GMT

Thanks @Nir_Shamir . I still hope in place upgrade will be available for Azure vmss one day, it would certainly be more convenient for customers.

Andy