topic Re: Installing Hotfix on R82 ElasticXL in Firewall and Security Management

Installing Hotfix on R82 ElasticXL

DominusRex23 — Fri, 25 Jul 2025 04:21:46 GMT

Hi Everyone,

We’ve set up an ElasticXL cluster (R82) and successfully installed the hotfix on Gateway1. However, Gateway2 fails with a “db error” during installation.

What we’ve tried:

Shut down Gateway1 to access Gateway2’s console
Uploaded the hotfix .tar manually
Ran installation via CLI, but it throws a “db error” with no further context

We suspect this might be related to database sync issues or corruption on Gateway2. Has anyone seen this before in ElasticXL setups? Is there a recommended way to reset or reinitialize the local DB without affecting the SMO

Any insights or SKs would be appreciated.

Thanks in advance!

Re: Installing Hotfix on R82 ElasticXL

emmap — Fri, 25 Jul 2025 05:36:29 GMT

Just to double check, are you following the documented procedure for installation?

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_ScalablePlatforms_AdminGuide/Content/Topics-SPG/Common/Installing-Uninstalling-Hotfix-on-Security-Group-Members.htm?tocpath=Common%20Procedures%20for%20Scalable%20Platforms%20%7CInstalling%20and%20Uninstalling%20a%20Hotfix%20on%20Security%20Group%20Members%7C_____0#Installing_and_Uninstalling_a_Hotfix_on_Security_Group_Members

If so and it's still not working, might need a TAC case raised to investigate deeper.

Re: Installing Hotfix on R82 ElasticXL

the_rock — Fri, 25 Jul 2025 17:29:49 GMT

Im 100% sure you need to follow exactly what @emmap sent. I had exact same issue with customer recently an that was the solution, disable auto clone feature.

Andy

Re: Installing Hotfix on R82 ElasticXL

genisis__ — Sat, 26 Jul 2025 12:29:24 GMT

I've actually got a TAC running for this - the Engineer is labing this issue.

Re: Installing Hotfix on R82 ElasticXL

the_rock — Sat, 26 Jul 2025 12:31:21 GMT

When I had case with customer for this exact issue, TAC asked us to do the same thing Emma mentioned and that fixed it.

Andy

Re: Installing Hotfix on R82 ElasticXL

genisis__ — Sat, 26 Jul 2025 12:31:24 GMT

I have a TAC case running for this exact issue!
Also can we get this moved to the thread I created " R82 ElasticXL & VSNext Issues"

Re: Installing Hotfix on R82 ElasticXL

genisis__ — Sat, 26 Jul 2025 12:32:56 GMT

Pretty sure I did this (I was on a zoom with TAC) and issue was replicated, hence they are going to lab this as well.

Re: Installing Hotfix on R82 ElasticXL

the_rock — Sat, 26 Jul 2025 12:35:22 GMT

What is the output of below in clish?

show smo image auto-clone state

Andy

Re: Installing Hotfix on R82 ElasticXL

genisis__ — Sat, 26 Jul 2025 16:11:15 GMT

b.t.w - just installed another two Nodes in my lab, this time with JHFA33 and in ClusterXL/VSX mode, so far no issues to report.

Re: Installing Hotfix on R82 ElasticXL

the_rock — Sat, 26 Jul 2025 16:42:40 GMT

Good news!

Re: Installing Hotfix on R82 ElasticXL

Chris_Atkinson — Sun, 27 Jul 2025 04:18:42 GMT

We typical don't merge threads like you've requested.

@PhoneBoy @_Val_ Might consider creating a specific ElasticXL section so tagging them to review.

Re: Installing Hotfix on R82 ElasticXL

genisis__ — Sun, 27 Jul 2025 10:08:12 GMT

Only reason I suggested that so that issues related to ElasticXL and VSNext could be held under one thread.

Re: Installing Hotfix on R82 ElasticXL

genisis__ — Sun, 27 Jul 2025 10:15:06 GMT

Still early but this suggests to me that R82 using traditional technologies would be a safer deployment for production setups, at this stage. I do have every confidence in ElasticXL and VSNext as superior replacements at some point in the near future.

It would certainly be worth Checkpoint investigating the conversion path from VSX to VSNext and ClusterXL to ElasticXL (100% sure this would not be easiest thing).

Re: Installing Hotfix on R82 ElasticXL

_Val_ — Mon, 28 Jul 2025 12:59:38 GMT

@Chris_Atkinson @genisis__ I confirm that we cannot merge threads. Concerning the tags, one can use any tags on any post.