topic Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ? in Firewall and Security Management

Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

Tiger_QAs — Thu, 24 Jun 2021 19:19:39 GMT

Exploring options to install a JHF on gateways from Smart console....

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

PhoneBoy — Thu, 24 Jun 2021 20:11:07 GMT

R80.40 allows you to install JHFs from SmartConsole.
I don't believe the gateways are required to be on R80.40 for this.

R81 allows you to perform version upgrades via SmartConsole.
Gateways definitely do NOT need to be on R81 for this.

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

Boaz_Orshav — Sun, 27 Jun 2021 05:40:49 GMT

The gateways can be of lower version (starting 77.30) but just notice they have to be connected to the internet since the Smart Console asks the gateway to download & install the Hotfix

In R81 you can both install Hotfix and upgrade version for gateways which are connected or not connected to the internet

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

JozkoMrkvicka — Sun, 27 Jun 2021 06:28:47 GMT

Is somewhere written what kind of pre-checks and post-checks are done during this upgrade via SmartConsole? Or maybe the best would be to have options to choose specific tasks before upgrade itself (like perform snapshot, perform failover, schedule upgrade, ...).

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

the_rock — Sun, 27 Jun 2021 11:10:56 GMT

You got all valid responses!

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

PhoneBoy — Sun, 27 Jun 2021 21:23:08 GMT

We're using CPUSE to do the upgrade, so it executes the same checks/processes.
Not sure about R80.40, but in R81, you can upgrade a two node cluster and it handles the failover.
Don't believe the upgrade can currently be scheduled.

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

Oliver_Fink — Mon, 28 Jun 2021 16:14:11 GMT

It would be really nice if there would be an option "Save Snapshot…" in addition to "Install Hotfix…". I nearly never implement any hotfix without doing a snapshot before. (Maybe this will rise the need to implement snapshot management (delete, export, import), too.)

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

the_rock — Mon, 28 Jun 2021 16:16:34 GMT

Thats valid point...I dont believe that was ever there though, even in previous versions.

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

PhoneBoy — Mon, 28 Jun 2021 19:40:18 GMT

Actually, CPUSE automatically does this with every installation.
This allows for a quick rollback in case something goes wrong.

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

abihsot__ — Tue, 29 Jun 2021 07:11:34 GMT

I believe CPUSE only creates snapshot during version upgrade, but not for hotfix installation.

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

Tsahi_Etziony — Tue, 29 Jun 2021 10:33:26 GMT

That is correct. CPUSE creates a snapshot for version upgrades, but not for hotfix installations. it is a tradeoff of time/risk/disk space - hotfixes can be easily uninstalled if needed.

For complex automations that allows much more than snapshots, I'd recommend using the Central Deployment Tool (CDT) .

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

abihsot__ — Tue, 29 Jun 2021 11:31:39 GMT

I would just use "right click" -> scripts -> one time script with the command of adding a snapshot:

clish -c "add snapshot JHFx"

And then proceed with install hotfix. Of course if there were hundreds of gateways, probably CDT is the way to go...

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

the_rock — Tue, 29 Jun 2021 13:14:45 GMT

@Tsahi_Etziony ...might sound slightly off topic, but just curious...any idea why snapshots are always so large in size? I never seen any less than 5 GB of space...

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

Tsahi_Etziony — Tue, 29 Jun 2021 13:26:21 GMT

@the_rock I do have some idea 😉 (Snapshots, CPUSE, upgrades, Blink... are all developed in my team)

Snapshots are simply packing the current root partition in a file - if you take a snapshot not during an upgrade, we copy the file aside. if you do it as part of an upgrade (no need to do anything - we do it for you), the upgrade is performed in a new root partition, so the old one is automatically and effortlessly packed into a snapshot. so the basic size of a snapshot is the size of the entire root partition (including disk space that was never used). we can later compress the snapshot by reducing its size to include only the used parts of the original partition, but still it would be several GBs.

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

the_rock — Tue, 29 Jun 2021 16:00:47 GMT

K, makes sense ty! 🙂

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

Alex_Shpilman — Thu, 01 Jul 2021 11:11:46 GMT

Hi @Tsahi_Etziony

When will this be available on MDS? Or is it a question for the management development team?

Thanks.

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

Tsahi_Etziony — Thu, 01 Jul 2021 11:57:24 GMT

@Alex_Shpilman, what do you refer to in this question? The hotfix installation from SmartConsole? This is already available on MDS as well (installing from MDS onto the GWs)

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

Vladimir — Thu, 01 Jul 2021 15:22:36 GMT

@Tsahi_Etziony , can you tell us if the past issue with snapshot names and descriptions not allowing spaces or special characters is still present, or if it is addressed?

Thank you.

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

PhoneBoy — Thu, 01 Jul 2021 22:18:04 GMT

Far as I know, still an issue (and don't rename them, either!).

Re: Is it possible to Hotfix a gateway running R80.40 from a Smart Console running on R80.40 ?

Dov_Fraivert — Sun, 04 Jul 2021 10:05:55 GMT

@Vladimir

Regarding snapshot name, because it serves as the name of snapshot file, we don't want to allow more than a single word.

Regarding description, we intend to release a fix that allows to add spaces. It is planned for Jumbos which be released in the coming months.
Regarding special characters, currently we only allow comma, dot and underscore. I do not know a reason / request to allow more.