topic Re: Installing the Latest Jumbo Hotfix in General Topics

Installing the Latest Jumbo Hotfix

LostBoY — Wed, 21 Nov 2018 13:15:21 GMT

Hi ,

Need help with offline installation of Jumbo Hotfix. As per my understanding these are the steps :-

1) Check CPUSE version updated to latest build or not

2)Download Jumbohotfix Package

3) Import Package

4) Verify Package

5) Install Package

I am having problem with the Import procedure , how do i import the downloaded version to the firewall disk ?

can someone please guide wrt to this.

Thanks

Re: Installing the Latest Jumbo Hotfix

Danny — Wed, 21 Nov 2018 14:13:33 GMT

Just use the Import Package button.

Re: Installing the Latest Jumbo Hotfix

G_W_Albrecht — Wed, 21 Nov 2018 14:13:40 GMT

After downloading the file to your desktop, open the GAiA WebGUI in browser, go Upgrades (CPUSE) > Status and Actions and click Import Package:

Re: Installing the Latest Jumbo Hotfix

LostBoY — Wed, 21 Nov 2018 14:23:49 GMT

Thanks for the reply..but i am using a VSX environment

need to import the package through CLI for the Gateways

Re: Installing the Latest Jumbo Hotfix

AlekseiShelepov — Wed, 21 Nov 2018 14:24:23 GMT

If you're too hardcore for web-interface, you can do it in CLI.

1. Copy Jumbo Hotfix package to the firewall into a temporary directory using SCP:

/var/log/upload/jumbo_hotfix/

2. Connect to the firewall with SSH in Clish

3. Acquire Configuration Lock over Gaia:

> lock database override

4. Import Jumbo Hotfix package:

> installer import local /var/log/upload/jumbo_hotfix/Check_Point_R77_30_JUMBO_HF_1_Bundle_T512_FULL.tgz

5. Check imported packages in Hotfixes section:

> show installer packages imported

> show installer package <Package_Number>

6. Verify that this package can be installed without conflicts:

> installer verify <Package_Number>

Info: Initiating verify of Check_Point_R77_30_JUMBO_HF_1_Bundle_T512_FULL.tgz...

Result: Installation is allowed

7. Install the imported package:

> installer install <Package_Number>

Re: Installing the Latest Jumbo Hotfix

G_W_Albrecht — Wed, 21 Nov 2018 14:29:43 GMT

Find all details of CPUSE here:

sk92449: Check Point Upgrade Service Engine (CPUSE) - Gaia Deployment Agent

Re: Installing the Latest Jumbo Hotfix

Danny — Wed, 21 Nov 2018 14:32:21 GMT

There is also SmartUpdate:

Re: Installing the Latest Jumbo Hotfix

LostBoY — Wed, 21 Nov 2018 14:37:36 GMT

Thanks for the reply, my problem is with Point no.1

How do i import the downloaded hotfix to the firewall ? anyother option apart from SCP ?

Thanks.

As the gateways are part of the VSX Cluster is CLI the only way ?

Re: Installing the Latest Jumbo Hotfix

G_W_Albrecht — Wed, 21 Nov 2018 15:13:40 GMT

That is correct, CLI is the only way for VSX...

Re: Installing the Latest Jumbo Hotfix

AlekseiShelepov — Wed, 21 Nov 2018 15:20:00 GMT

You can copy files from FTP server or from SCP server in your network, running commands on the VSX gateway.

But why do you have such question? Maybe you cannot connect because your account's default shell on VSX is clish? SCP uses SSH connection, which should be already available to you. Otherwise, how would you connect by SSH to do anything there? So, you should be able to run WinSCP on the machine from which you connect by SSH.

Re: Installing the Latest Jumbo Hotfix

Danny — Wed, 21 Nov 2018 15:26:21 GMT

Have you tried the following in GAiA VSX (sk92425) expert mode:

set virtual-system 0; set vsx off
Update via CPUSE within WebUI
set vsx on

Re: Installing the Latest Jumbo Hotfix

JozkoMrkvicka — Wed, 21 Nov 2018 19:17:06 GMT

If you have physical access, then you can download the latest jumbo hotfix into USB stick, plug USB into device and mount it according to this procedure:

How to mount a USB Drive in Gaia and SecurePlatform

Re: Installing the Latest Jumbo Hotfix

Maarten_Sjouw — Wed, 21 Nov 2018 19:21:18 GMT

you might need to change the shell on the user you are using to be able to run scp, make sure to set the shell of the user to /bin/bash and then try to do the scp copy.

PS today I ran into a really weird problemalso on VSX. I was trying to run installer with jumbo 154, and the installer kept telling me there was a need to upgrade as the version was not the latest, it was 1573.

All morning in an chat and trying to get past this point, in the beginning of the afternoon, after lunch and a reboot all the sudden there was a different message, please update to the later version 1577 (the CPUSE SK was still saying 1573 was the latest), so installer agent update, but still it cannot get the update file.

Maybe someone at Check Point was to quick in setting the version number on the update server?

Re: Installing the Latest Jumbo Hotfix

LostBoY — Thu, 22 Nov 2018 08:12:46 GMT

Thought about it but wasnt sure whether it will hamper current VSX configuration.

Does setting it of and on back again will impact the current scenario in anyway ?

Re: Installing the Latest Jumbo Hotfix

LostBoY — Thu, 22 Nov 2018 12:19:08 GMT

Changed the shell to bash and it worked.. Thanks a lot

I applied the update on 2 cluster members , however after updating when i check their status in SmartConsole one of the member displays up to date and the other says 3 updates available.. but i applied the same version for both.

Re: Installing the Latest Jumbo Hotfix

Maarten_Sjouw — Thu, 22 Nov 2018 14:56:59 GMT

On both members you can check with installer download-and-install <Tab key> which packages should be available according to CPUSE. (if you have access to Internet from the gateway)

Re: Installing the Latest Jumbo Hotfix

Luigi_Vezzoso1 — Wed, 09 Jan 2019 10:20:01 GMT

Hi,

which is the best practice installing the JH? We should install directly the LATEST JHF or I should do each steps?

best regards

Re: Installing the Latest Jumbo Hotfix

G_W_Albrecht — Wed, 09 Jan 2019 10:30:27 GMT

That only depends on the installed version and the gap between this and the new version - you can find details in sk106162 / sk116380 / sk137592 ! Usually, you first will have to update CPUSE DA to the current version if needed and then install the newest GA Jumbo HF.

Re: Installing the Latest Jumbo Hotfix

Luigi_Vezzoso1 — Wed, 09 Jan 2019 10:39:33 GMT

OK but In that SK i cannot find the "update" path between two JHF....isn't it?

Re: Installing the Latest Jumbo Hotfix

G_W_Albrecht — Wed, 09 Jan 2019 10:53:00 GMT

As i wrote already - only CPUSE DA has to be the newest version, then you can install the newest GA Jumbo directly on top of the opld Jumbo HF. Also, CPUSE will tell you upon verify if install is possible at all...