Checkpoint Firewall Upgrade R81.10 Jumbo Hotfix will raise a no response result

chumicat — Tue, 18 Jun 2024 07:16:29 GMT

This is an experience sharing.

My customer's checkpoint firewalls are R81.10 with Jumbo Hotfix HF66 on appliance 5200.

We are going to upgrade the Jumbo Hotfix to perform the CVE-24919 mitigation.

The problem occured when we upgrade to Jumbo Hotfix HF139 or HF150. Other version might have same situation, but I didn't test it.

The symptoms of the problem is: Upgrade procedure will stock at step of installation update, and the Duration counter will stock either. We will not able to access the Gaia Portal during this procedure.

Do not panic! It will stock about 15 minutes and then we can access the Gaia Portal again.

DO NOT RESTART THE CP SERVICE OR REBOOT THE DEVICE DURING THE PROCEDURE, or you might need to reinstall the firewall. I've been there.

Re: Checkpoint Firewall Upgrade R81.10 Jumbo Hotfix will raise a no response result

PhoneBoy — Tue, 18 Jun 2024 20:21:25 GMT

Is this a standalone box (with management included)?
15 minutes seems like a long time after a reboot otherwise.

Re: Checkpoint Firewall Upgrade R81.10 Jumbo Hotfix will raise a no response result

the_rock — Tue, 18 Jun 2024 22:51:14 GMT

I had done this 4 times on 5200 appliances, never had this issue.

Andy

topic Re: Checkpoint Firewall Upgrade R81.10 Jumbo Hotfix will raise a no response result in Firewall and Security Management

Checkpoint Firewall Upgrade R81.10 Jumbo Hotfix will raise a no response result

Re: Checkpoint Firewall Upgrade R81.10 Jumbo Hotfix will raise a no response result

Re: Checkpoint Firewall Upgrade R81.10 Jumbo Hotfix will raise a no response result