topic Re: Question regarding R80.20 software release in General Topics

Question regarding R80.20 software release

Maik — Tue, 18 Jun 2019 11:35:37 GMT

Hello guys,

I have a quite basic qustion which got me confused so far.

It is related to a gateway upgrade from R80.10 to R80.20 - for that I used the upgrade wizard which pointed me to the file "Check_Point_R80.20_T101_Fresh_Install_and_Upgrade_Security_Gateway.tgz", linked here.

That's fine and the installation can be accomplished via cpuse - CLI or WebUI. However, what I do not unserstand is, the related jumbo hotfix package, that is included - or not included.

The file name itself mentions "T101", but this can't be related to the latest jumbo hotfix release which is release take 80 - or GA just take 47.

The package itself for the fresh install or upgrade (within cpuse) was updated on the 30th April - which roughly translates to the latest jumbo hotfix release (which was released on the 25th).

So my question is - does the install/upgrade come with a jumbo hotfix or do I need to install one on top?

Thanks and best regards,

Maik

Re: Question regarding R80.20 software release

Alex- — Tue, 18 Jun 2019 12:19:11 GMT

It doesn't include the latest hotfix, you will have to install Take 47.

Re: Question regarding R80.20 software release

Maik — Tue, 18 Jun 2019 12:40:35 GMT

Thanks Alex!

Can you also clarify the T_101 in the file name, just for my understanding?

Re: Question regarding R80.20 software release

G_W_Albrecht — Tue, 18 Jun 2019 12:49:38 GMT

Have a look (or more) here:

R80.20 File Revision History | Release map | Upgrade map | Backward Compatibility map | Releases plan

Re: Question regarding R80.20 software release

Maik — Tue, 18 Jun 2019 13:12:52 GMT

Thank you very much for the links, unfortunately it did confuse me even more.

In the "Check Point Release Terminology" it's written down that updates or changes in existing images can be verified via the file revision (should be the "T" number I am referencing to):

How do I track changes in existing images?
Upon important hotfixes, Check Point may update the release images to automatically install the fixes. Starting in R77, these changes are documented in several places: "files revision" PDF, Release Notes update, a note under the download links and filenames changes.

However, the file revision pdf file shows the following:

It seems like that the "take" number has always been 101 while the hash and therefore the actual content of the images changed. Maybe I am missing something - sorry if that's the case, but currently it's just very confusing.

Re: Question regarding R80.20 software release

Maik — Tue, 18 Jun 2019 14:29:07 GMT

Thank you very much for your reply and links!

However, I'm still confused regarding the following:

Doc: Check Point Releases Terminology

How do I track changes in existing images?
> Upon important hotfixes, Check Point may update the release images to automatically install the fixes. Starting in R77, these changes are documented in several places: "files revision" PDF, Release Notes update, a note under the download links and filenames changes.

Doc: Check Point R80.20 File Revision History

From my point of view both of these statements/information are contradictory to each other as the "File Revision History" shows that the take stays the same (101) while the hash and therefore content of the image changes over time.
It is also not mentioned how the take of the image translates to any given jumbo hotfix take - if applicable at all.

Question regarding R80.20 software release

G_W_Albrecht — Tue, 18 Jun 2019 14:51:22 GMT

Currently, this is relevant only for R80.10, see sk116380 Jumbo Hotfix Accumulator for R80.10 (R80_10_jumbo_hf):

Effective October 16th, 2018, the R80.10 image has been replaced with Take 479.
R80.10 image Take 479can be installed with R80.10 Jumbo Hotfix Accumulator Take 154and above.

R80.20 image still is Build/Take 110: R80.20 was released on September 26, 2018. As of January 15th 2019, R80.20 Take 101 with Jumbo Hotfix Accumulator take_17 (described in sk137592) is considered as Check Point's default version (widely recommended for all deployments).

It is true that the hash and therefore content of the image changes over time, but with R80.20 there only seem minor fixes (e.g. install scripts), no included jumbo hfs...