topic Re: Uninstall product from gateway or management server in General Topics

Uninstall product from gateway or management server

nmelay2 — Fri, 15 Nov 2024 14:30:17 GMT

Hello guys,

Is there a way to cleanly uninstall products from a gateway or management, once they're no longer used?

For example, Endpoint Policy Management blade was previously enabled, but no longer is, and you want to cleanly get rid of the UEPM directories.

Re: Uninstall product from gateway or management server

the_rock — Fri, 15 Nov 2024 15:15:10 GMT

If I were you, I would NOT do those things myself. I would open TAC case to get an official answer/procedure.

Andy

Re: Uninstall product from gateway or management server

PhoneBoy — Fri, 15 Nov 2024 15:29:55 GMT

The short answer is no.

Generally speaking, the same system image is used for gateway and management, which includes components for all of the above.
Depending on both the options chosen at initial installation and activation in SmartConsole, the various pieces are activated as needed.

On the gateway side, the same infrastructure is used for most blades, which means there's nothing really to remove.
The management side has similar dependencies amongst its components, though there is some data that is unique to each blade.
In any case, the software that makes up these components cannot be removed individually.
The data that is unique to those management blades (e.g. Endpoint) remains when they are deactivated and, short of an advanced migration/clean install, that data won't be removed unless it is done so manually.

Professional Services (either through Check Point or a partner) might be able to assist with this task if it needs to be done in place.

Re: Uninstall product from gateway or management server

nmelay2 — Fri, 15 Nov 2024 15:57:11 GMT

I was indeed looking for an official procedure/command, not some kind of hack.

Re: Uninstall product from gateway or management server

the_rock — Fri, 15 Nov 2024 16:00:25 GMT

Right...and thats why I suggested what I did.

Andy

Re: Uninstall product from gateway or management server

nmelay2 — Fri, 15 Nov 2024 16:01:54 GMT

Thanks for your detailed answer.

I was under the impression that the UEPM directories at least were only created once the blade was activated, but just realized they're already here after the FTW and initial installation.

OK, makes sense there's no way to remove it then.

Re: Uninstall product from gateway or management server

the_rock — Fri, 15 Nov 2024 16:08:36 GMT

Out it this way...Im sure there is a way to remove them, but if you make a mistake, you will probably end up doing way more "damage" than what you intended. Honestly, if I were you, I would still contact TAC to get their official statement, but my gut feeling is they will probably tell you something similar to what @PhoneBoy already advised.

Best,

Andy