topic Re: What is best practice when de-/installing multiple hotfixes in General Topics

What is best practice when de-/installing multiple hotfixes

RickHoppe — Wed, 29 Nov 2017 15:39:44 GMT

Hi,

I'm having a situation I need to install the latest Jumbo Hotfix Take on several Security Gateways that have an older JHF Take and an incompatible Hotfix. A new version of that Hotfix is supplied which can be installed on top of the latest Jumbo Hotfix.

I wonder what the quickest way or best practice is to do this via CPUSE.

Usually I would proceed like this.

- Deinstall hotfix

- Reboot

- Install new Jumbo Hotfix Take (old JHF take will automatically be deinstalled)

- Reboot

- Install new version of hotfix

- Reboot

But in this case I have quite a lot Security Gateways and it would save time if I could do it faster.

Would you advise it to do it like this? Or do you have a better suggestion?

- Deinstall hotfix, suppress reboot.

- Install new Jumbo Hotfix Take, suppress reboot (old JHF take will automatically be deinstalled).

- Install new version of hotfix

- Reboot

Regards,

Rick

Re: What is best practice when de-/installing multiple hotfixes

Hugo_vd_Kooij — Wed, 29 Nov 2017 16:07:13 GMT

Surpressing reboots may result in issues when not everything is done untill the reboot.

Particularly with your scenario. I rather spend an extra 30 minutes now then having to spend a lot of time on odd issues later.

Re: What is best practice when de-/installing multiple hotfixes

RickHoppe — Thu, 30 Nov 2017 11:04:37 GMT

Better safe than sorry. I totally agree.

I was recommended the second scenario by professionals though it did not came from Check Point TAC. If there is no other supported scenario to speed things up I just going to extend the maintenance window.

Re: What is best practice when de-/installing multiple hotfixes

Gaurav_Pandya — Thu, 30 Nov 2017 11:51:35 GMT

Yeah. It is better to spend little time with best practice than more time with strange issues.