topic Re: Upgrade from R77.30 to R80.30 in General Topics

Upgrade from R77.30 to R80.30

Nelson_Wong — Fri, 25 Oct 2019 10:48:03 GMT

Hi all,

I have 1 SMS with using open server and 2 gateway (cluster) with using appliance 4600. Both of them are 32bit OS.

I would like to upgrade these server to r80.30 and using 64bit OS.

What are requirements of hardware and software? (e.g. CPU Core, RAM, disk space)

How do I upgrade SMS and gateways?

Can I upgrade without downtime?

Thank you for your answering.

Re: Upgrade from R77.30 to R80.30

PhoneBoy — Sun, 27 Oct 2019 00:12:38 GMT

The hardware requirements are documented in the R80.30 Release Notes: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_RN/html_frameset.htm

You upgrade the SMS first, which should not involve any downtime since the gateways will continue to pass traffic and will temporarily store logs locally until the management server comes back up and you push policy to the gateways.

The R80.30 Installation and Upgrade guide covers the different upgrade methods for both Management and Gateways, which also includes different methods for upgrading clusters with different levels of downtime. See: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_Installation_and_Upgrade_Guide/html_frameset.htm

If you have specific questions after reading all this, ask away.

Re: Upgrade from R77.30 to R80.30

Nelson_Wong — Mon, 28 Oct 2019 03:20:29 GMT

I also have a number of site-to-site VPN and a Remote VPN. WIll these traffics be interrupted?

Re: Upgrade from R77.30 to R80.30

_Val_ — Mon, 28 Oct 2019 08:28:47 GMT

Look for "Connectivity Upgrade" in R80.30 Installation and Upgrade Guide. With CU path, it is possible to upgrade almost seamlessly

However, for practical purposes, I would advise planning a short service interruptions anyway.

Re: Upgrade from R77.30 to R80.30

Nelson_Wong — Fri, 01 Nov 2019 19:07:04 GMT

I have upgraded the SMS to R80.30. However, I found that I cannot get data from FW. The status shown as "Execution error".

How can I fix this issue?

Re: Upgrade from R77.30 to R80.30

PhoneBoy — Sun, 03 Nov 2019 13:45:08 GMT

Since I'm not sure what the context that error message has, please provide a screenshot.

Re: Upgrade from R77.30 to R80.30

Nelson_Wong — Mon, 04 Nov 2019 04:55:30 GMT

Please take a took in Operation Status session. CP-FW1 and CP-FW status are shown as Execution error.

I found a KB for this issue:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk35817

However, I have no idea how I can be done in solution step 1.

Re: Upgrade from R77.30 to R80.30

PhoneBoy — Mon, 04 Nov 2019 08:56:44 GMT

In general, we have not updated SmartUpdate much for R80.x.
What is it you are trying to do with SmartUpdate?

If you're trying to kick off an upgrade, this should be done with CPUSE on the gateway, not with SmartUpdate.
License management can be done on the CLI.

Re: Upgrade from R77.30 to R80.30

Nelson_Wong — Mon, 04 Nov 2019 09:09:24 GMT

I am not using SmartUpdate. Here is my upgraded steps:
1. Export existing SMS (R77.30) using migration tools.
2. Shutdown existing SMS (R77.30).
3. Fresh Install a new SMS (R80.30)
4. Import to new SMS (R80.30) using migration tools.
5. Install Policy.
6. Go to SmartUpdate and get data from SMS and cluster gateways.

In normal, all the devices status should be shown as 'Get Gateway Data' completed successfully, but now only SMS can be got.

So, I would like to ask how I can fix this issue.

Thank you.

Re: Upgrade from R77.30 to R80.30

PhoneBoy — Mon, 04 Nov 2019 09:24:16 GMT

In R80,x, the status of the gateways should be viewed in SmartConsole, not SmartUpdate.

Re: Upgrade from R77.30 to R80.30

Nelson_Wong — Mon, 04 Nov 2019 10:37:12 GMT

So, should I not care on this issue? If the license status shown as OK in SmartConsole, it is normal. Am I right?

Re: Upgrade from R77.30 to R80.30

PhoneBoy — Mon, 04 Nov 2019 11:19:04 GMT

You are correct, the issue with SmartUpdate is merely cosmetic.