topic R81 Upgrade in Firewall and Security Management

R81 Upgrade

JayM1 — Thu, 26 Sep 2024 12:47:28 GMT

Hi All,

Looking to upgrade SMS and Gateways currently running R81 to R81.20. The SMS is also used by endpoint clients to get policies and AV updates.

1. Upgrading SMS existing server via CPUSE after verification is clear is there any other checks that need to be made ? How long does install take ?

2. I will snapshot server but any backups I still may need to take and which ones ?

3. Will R81 Gateways and endpoints continue to work and SIC remain established once SMS is running R81.20 ?

4. Upgrade of the Firewall Gateways themselves via CPUSE what back ups do I need as these are appliances. How long does upgrade take ? Is there a quick recovery process ?

5. Upgrade of SMART-1 252 Log Server which is a physical appliance. Whats the best way to backup this system and restore from it should upgrade fail?

6. Whats the recommended disk space rquired for upgrade for SMS , Gateway and Log server ?

Re: R81 Upgrade

AkosBakos — Thu, 26 Sep 2024 13:56:10 GMT

1. Upgrading SMS existing server via CPUSE after verification is clear is there any other checks that need to be made ? How long does install take ?

Always check the /var/log/messages

How long?: depends on the quantity of cores, the size etc. at least 60 minutes to appr 4 hours.

2. I will snapshot server but any backups I still may need to take and which ones ?

Always do neccesary + 1 backups. I do the followings (yes all the 4):

CP snapshot
System backup
save configuration
migrate_export

3. Will R81 Gateways and endpoints continue to work and SIC remain established once SMS is running R81.20 ?

Of course, SIC won't change

4. Upgrade of the Firewall Gateways themselves via CPUSE what back ups do I need as these are appliances. How long does upgrade take ? Is there a quick recovery process ?

CP snapshot
System backup
save configuration

The quickest recovery is revert from snapshot

How long? 30 mintues to 90 minutes

5. Upgrade of SMART-1 252 Log Server which is a physical appliance. Whats the best way to backup this system and restore from it should upgrade fail?

CP snapshot
System backup
save configuration

The quickest recovery is revert from snapshot

6. Whats the recommended disk space rquired for upgrade for SMS , Gateway and Log server ?

At least the root partition. Run "verify" and it will checj the requirements

Akos

Re: R81 Upgrade

JayM1 — Thu, 26 Sep 2024 15:56:59 GMT

Thank you for response not familiar with CP snapshot how much space does that take up on gateway if I dont have external drive ?
Is this the preferred recovery method?

Is it easy to upgrade firewall in a cluster?

Re: R81 Upgrade

Tal_Paz-Fridman — Thu, 26 Sep 2024 16:11:52 GMT

Always follow the recommendations and instructions in R81.20 Installation and Upgrade Guide

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_Installation_and_Upgrade_Guide/Content/Topics-IUG/Getting-Started.htm

It includes a section about backing up:

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_Installation_and_Upgrade_Guide/Content/Topics-IUG/Backing-Up-and-Restoring.htm?tocpath=_____3

The machine snapshot can be applied from CLI or from Gaia Portal