topic Re: Full HA cluster upgrade from R77.30 to R80.10 in Firewall and Security Management

Full HA cluster upgrade from R77.30 to R80.10

Alexander_Urits — Sun, 12 Nov 2017 20:33:02 GMT

Hi.

What is the best practice for upgrading full ha cluster from R77.30 to R80.10?

Could not find any documentation on that on SK.

Thanks,

Alex

Re: Full HA cluster upgrade from R77.30 to R80.10

PhoneBoy — Mon, 13 Nov 2017 04:10:13 GMT

Keep in mind that R80.10 management requires significantly more memory than R77.x management does.

On a standalone gateway and Full HA scenario, this means your gateways will need, at bare minimum, 8GB of RAM.

More is recommended if your appliances support it.

That said, your options for Full HA aren't all that different than any other upgrade.

You have two choices:

1. In-place upgrade with CPUSE

2. Migrate export / import ("Advanced" upgrade)

Personally, I would opt for a migrate export/import upgrade.

There are, of course, more steps here and I'll see if I can get someone to provide some more context.

Re: Full HA cluster upgrade from R77.30 to R80.10

Tomer_Sole — Mon, 13 Nov 2017 07:24:14 GMT

Hi, is this a Management machine or a Gateway?

Re: Full HA cluster upgrade from R77.30 to R80.10

Alexander_Urits — Mon, 13 Nov 2017 07:31:23 GMT

Hi Tomer.

Full HA means that I have two appliances (in this case two 4400) that any one of the is a Management and a Gateway. (in full sync).

Re: Full HA cluster upgrade from R77.30 to R80.10

Hugo_vd_Kooij — Mon, 13 Nov 2017 10:29:31 GMT

Alexander, Don 't even think of putting a R80.10 Smart Center on a 4400 appliance.

I rather take my chances in a foxhole during an artillery barrage then trying to do something like that.

Get you Smart Center off these boxes to a separate system before you even think R80.

Re: Full HA cluster upgrade from R77.30 to R80.10

Timothy_Hall — Mon, 13 Nov 2017 13:08:28 GMT

Gotta agree with Hugo here, the 4400 only has two cores and 4GB of RAM. Running R80.10 purely as a gateway on a 4400 would probably be OK if you didn't have too many blades enabled, but including R80.10 management as well on a 4400? Will probably work but the performance will almost certainly be unacceptable.

--
My book "Max Power: Check Point Firewall Performance Optimization"
now available via http://maxpowerfirewalls.com.

Re: Full HA cluster upgrade from R77.30 to R80.10

PhoneBoy — Mon, 13 Nov 2017 15:03:20 GMT

It certainly wouldn't work with anything less than 8GB of RAM.