topic Downgrade from R82.10 in Firewall and Security Management

Downgrade from R82.10

Secret-goblin-5 — Tue, 07 Oct 2025 10:40:40 GMT

I just got some new gateways which are already on the latest R82.10 OS version.

I want to move the to the same version and JHF as the live gateways so that I can migrate export the old config.

I cannot get the new CPUse to show me the downgraded version I want, it just says "You are up to date" (I know! That's the problem!)

I uploaded blink_image_1.1_Check_Point_R82_T777_JHF_T39_SecurityGateway.tgz, which uploaded, but did not appear.

All I see is

How do I "downgrade" to the version I want?

Re: Downgrade from R82.10

Peter_Lyndley — Tue, 07 Oct 2025 10:45:32 GMT

simple answer - you cant.

If they come with R82.10 , then i'm guessing they are the new appliances with ARM chips. These require R82.10 and no other version will run on them yet.

What is your concern about the old config ?

Re: Downgrade from R82.10

Secret-goblin-5 — Tue, 07 Oct 2025 10:54:28 GMT

We are doing in place upgrades.

Swapping the old standby, moving active over, then swapping the next one.
Our goal is 0 downtime.

We have VTI tunnels which are configured in WebUI, Custom static routes, custom security settings. A policy push won't cut it.

So how do we move the config across from the old ones to the new ones?

Re: Downgrade from R82.10

Chris_Atkinson — Tue, 07 Oct 2025 10:57:24 GMT

3900s can't be downgraded they need R82.10 with it's updated kernel.

Re: Downgrade from R82.10

Vincent_Bacher — Tue, 07 Oct 2025 11:02:32 GMT

Yes. More specifically, R82.10 uses kernel version 5.14, while R82 uses Linux kernel 4.18.
3900s ARM processors are not supported by kernels below 5.14.

Re: Downgrade from R82.10

Peter_Lyndley — Tue, 07 Oct 2025 11:06:46 GMT

Have a look at MVC (Multi Version Cluster) in the upgrade and install guides.

You can copy and paste the 'show configuration' across in most cases, certainly all the things you mention above. This along with MVC being enabled should allow you a 0 downtime (assuming the interface convention/topology is the same between the two appliances) - sometimes a small downtime is unavoidable.

Re: Downgrade from R82.10

hle2001 — Mon, 10 Nov 2025 21:52:03 GMT

If I upgrade my central virtual machine security Management server from R81.20 to version R82, can it be able to manage the new pair 3920 came with R82.10 version? this new 3920 will replace my current clusterXL 3600 model running R81.20.

Thank you,

-Robert Lee

Re: Downgrade from R82.10

the_rock — Mon, 10 Nov 2025 22:07:50 GMT

As the guys said, you cant do it and say even if you could, I would NOT recommend it.

Re: Downgrade from R82.10

Chris_Atkinson — Mon, 10 Nov 2025 23:13:31 GMT

Correct yes make sure it has the correct (or latest) JHF/Jumbo aswell.

Re: Downgrade from R82.10

the_rock — Mon, 10 Nov 2025 23:15:36 GMT

Or at least recommended take.