topic Re: CDT upgrade method in Firewall and Security Management

CDT upgrade method

khodgson_bts — Thu, 19 Oct 2023 11:17:22 GMT

What type of upgrade method does the CDT use when upgrading an HA cluster?

Multi-Version Cluster, Minimum Effort or Minimum Downtime?

Re: CDT upgrade method

the_rock — Thu, 19 Oct 2023 13:09:21 GMT

https://support.checkpoint.com/results/sk/sk111158

Im fairly sure its MVC, but maybe someone else can confirm.

Andy

Re: CDT upgrade method

_Val_ — Thu, 19 Oct 2023 13:10:42 GMT

Full Connectivity Upgrade by default, as stated in sk111158

Re: CDT upgrade method

the_rock — Thu, 19 Oct 2023 13:12:37 GMT

Yup, correct.

Andy

Central Deployment Tool (CDT) is a utility that runs on Security Management Servers and Multi-Domain Security Management Servers running Gaia OS. This utility lets you manage a deployment of software packages from your Management Server to the multiple managed Security gateways and cluster members at the same time:

Installation of software packages
Perform various actions - take snapshots, run shell scripts, push/pull files, etc.
Automate the RMA backup and restore process

CDT handles cluster upgrades automatically, including Connectivity Upgrade (CU).

Re: CDT upgrade method

khodgson_bts — Tue, 12 Dec 2023 14:07:42 GMT

According to the CDT admin guide it's MVC for versions R80.40 and up.

Introduction to CDT (checkpoint.com)

Re: CDT upgrade method

the_rock — Thu, 19 Oct 2023 13:24:02 GMT

Good point, just saw the same.

Andy

Re: CDT upgrade method

Don_Paterson — Thu, 19 Oct 2023 17:27:36 GMT

MVC

If you keep an eye on GATEWAYS & SERVERS view during the upgrade you will see the state, mode and version changing.
It says Multi-Version Cluster.
You may need to expand the Version column.

Re: CDT upgrade method

Sergei_Shir — Tue, 12 Dec 2023 14:10:37 GMT

Quote from

Central Deployment Tool (CDT) Administration Guide -> page "Introduction to CDT" -> section "CDT workflow to upgrade Cluster Members in High Availability mode"

Note - The CDT uses the:

Multi-Version Cluster (MVC) Upgrade when you upgrade to R80.40 or higher.
Full Connectivity Upgrade (FCU) when you upgrade to R80.30 or lower.

Re: CDT upgrade method

Don_Paterson — Tue, 12 Dec 2023 14:47:15 GMT

One thing to note is the naming of CDT vs CD.

CDT is the CLI tool (long standing tool) sk111158 and CD is the name for the new feature (effectively CDT) embedded into / added to the SmartConsole since R80.40

It's normal for the names to get confused, especially when they are using almost the same name.

When the names are not getting confused then the question can be completely understood and the answers more accurate.

All good though.

Minimum Downtime Upgrade

This section provides instructions for Minimum Downtime (formerly, Zero Downtime) Upgrade:

Best Practice - Use the Central Deployment in SmartConsole

. For more information, see the R81.20 Security Management Administration Guide > Chapter Managing Gateways > Section Central Deployment of Hotfixes and Version Upgrades.

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_Installation_and_Upgrade_Guide/Content/Topics-IUG/Minimum-Downtime-Upgrade.htm?Highlight=central%20deployment

Upgrade of Security Gateways and Cluster Members with Central Deployment

With Central Deployment in SmartConsole

, you can install software packages to upgrade or to perform a clean install on Security Gateways and Cluster Members.

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_Installation_and_Upgrade_Guide/Content/Topics-IUG/Upgrade-Methods.htm?Highlight=central%20deployment

Re: CDT upgrade method

the_rock — Tue, 12 Dec 2023 14:50:31 GMT

I am old school as they say for these things...I ALWAYS stick with things that work for me, which in this case has always been zero downtime upgrade, must have done 10s of them and never had a single problem.

Andy