topic Re: R80.40 Offline Firewall Build & Update Not Possible in Firewall and Security Management

R80.40 Offline Firewall Build & Update Not Possible

B_P — Mon, 23 Aug 2021 21:50:22 GMT

Open Server on Hyper-V, fresh install R80.40, upload latest CPUSE v2101 (v2084 same thing) via Gaia but errors with 'Error occurred while trying to read hc.config file.' Can't install latest JFH without updated CPUSE.

Re: R80.40 Offline Firewall Build & Update Not Possible

PhoneBoy — Mon, 23 Aug 2021 22:37:18 GMT

Actual screenshots would help.
You can certainly manually deploy the latest Deployment Agent from here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92449
Otherwise I suggest engaging with the TAC.

Re: R80.40 Offline Firewall Build & Update Not Possible

B_P — Mon, 23 Aug 2021 22:54:16 GMT

@PhoneBoy wrote:
Actual screenshots would help.

Here you go, from Gaia > CPUSE > Status & Updates > Import Package:

@PhoneBoy wrote:
You can certainly manually deploy the latest Deployment Agent...

How certain are you, exactly? 🙂

@PhoneBoy wrote:
Otherwise I suggest engaging with the TAC.

I don't have time to be volunteer Check Point QC today unfortunately.

Re: R80.40 Offline Firewall Build & Update Not Possible

Chris_Atkinson — Mon, 23 Aug 2021 23:15:21 GMT

Update of Deployment Agent itself manually is described in Section 3-B (CLI)

Procedure:

Transfer the CPUSE Agent package (DeploymentAgent_<build>.tgz) to the machine (into some directory - e.g., /some_path_to_CPUSE/).
Run: Clish> installer agent install <package_name>

Re: R80.40 Offline Firewall Build & Update Not Possible

B_P — Tue, 24 Aug 2021 02:50:49 GMT

Chris, I'm looking to get the web update working.

Re: R80.40 Offline Firewall Build & Update Not Possible

PhoneBoy — Tue, 24 Aug 2021 03:06:33 GMT

What does /opt/CPInstLog/DeploymentAgent.log say?
@Tsahi_Etziony any suggestions?

Re: R80.40 Offline Firewall Build & Update Not Possible

Boaz_Orshav — Tue, 24 Aug 2021 07:25:44 GMT

Indeed updating of Deployment Agent from GUI is a bit different.

Instead of using import & install there is a special button "Install DA"
I understand it is not so intuitive and we shall soon update it.

Re: R80.40 Offline Firewall Build & Update Not Possible

_Val_ — Tue, 24 Aug 2021 08:41:10 GMT

>>>I don't have time to be volunteer Check Point QC today unfortunately.

Certainly understandable, but you are not doing it right, I am afraid.

DA is not a regular upgrade package. Use "Install DA" button instead.

Re: R80.40 Offline Firewall Build & Update Not Possible

B_P — Tue, 24 Aug 2021 14:32:04 GMT

Ahh, the special Install DA button. Where is that? /s 🙂

Re: R80.40 Offline Firewall Build & Update Not Possible

B_P — Tue, 24 Aug 2021 14:34:35 GMT

Yeah see post above, the UI hides it. Also, nowhere in this article does it mention the button. Is there anther article that details updating the Deployment Agent through the web?

Re: R80.40 Offline Firewall Build & Update Not Possible

_Val_ — Tue, 24 Aug 2021 14:54:50 GMT

Yes, you are correct, that part is missing. We will update the SK.