topic Re: Upgrade from R81.10 to R82 (Question) in General Topics

Upgrade from R81.10 to R82 (Question)

RemoteUser — Tue, 06 Jan 2026 10:06:40 GMT

Hi Mates,

Happy new year everyone, hope this year is going great for everyone!

I've a simple question regarding the upgrade of gateways/clusters to R82 from R81.10 or R81.20.

My question is: how can I upgrade these gateways/clusters to R82 while keeping all configurations exactly as they are? Which is the safest method?

Any advice on the recommended procedure and potential gotchas would be greatly appreciated.

Thanks in advance!

Re: Upgrade from R81.10 to R82 (Question)

the_rock — Tue, 06 Jan 2026 11:30:04 GMT

Hey brother,

Happy New Year!

I had done this before via smart console, went real well. You can also do it old school method, via web UI, just enable mvc on the backup member first, then once upgraded, uncheck option "if it fails" when pushing policy and make sure version is changed to R82 on cluster object. When other member is upgraded, disable mvc on first member and install policy again (recheck the option if it fails).

Re: Upgrade from R81.10 to R82 (Question)

the_rock — Tue, 06 Jan 2026 11:50:35 GMT

@RemoteUser

This is, more less, what I was referring to.

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Installation_and_Upgrade_Guide/Topics-IUG/MVC-Upgrade-of-ClusterXL-GW-mode.htm?tocpath=Upgrade%20of%20Security%20Gateways%20and%20Clusters%7CUpgrading%20ClusterXL%252C%20VSX%20Cluster%252C%20or%20VRRP%20Cluster%7CMulti-Version%20Cluster%20(MVC)%20Upgrade%7C_____4

Re: Upgrade from R81.10 to R82 (Question)

_Val_ — Tue, 06 Jan 2026 14:40:58 GMT

As Andy already said, MVC (see the documentation) is the way

Re: Upgrade from R81.10 to R82 (Question)

RemoteUser — Tue, 06 Jan 2026 13:08:00 GMT

Thank you brother if i want to upgrade form clish,

I see these two options:

Num Display name Status
3 Blink_image_1.1_Check_Point_R82_T777_JHF_T44_SecurityGateway.tgz Available for Download
** Majors **
5 Check_Point_R82_T777_Gaia_Install_and_Upgrade.tgz Available for Download

What's the difference between these two packages?

If my goal is to upgrade to R82 while keeping all existing configurations intact, are they essentially the same in terms of safety and result? Which one is recommended for an in-place upgrade on a gateway/cluster?

Re: Upgrade from R81.10 to R82 (Question)

_Val_ — Tue, 06 Jan 2026 13:14:05 GMT

Did you read the upgrade guide yet? Please do and come back if something is unclear after reading.

Re: Upgrade from R81.10 to R82 (Question)

_Val_ — Tue, 06 Jan 2026 13:25:49 GMT

Here is the Installation and Upgrade guide for R82, appropriate chapter: https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_Installation_and_Upgrade_Guide/Content/Topics-IUG/Upgrade-Methods.htm?tocpath=Upgrade%20Options%20and%20Prerequisites%7C_____4

Re: Upgrade from R81.10 to R82 (Question)

RemoteUser — Tue, 06 Jan 2026 13:33:35 GMT

Hi @_Val_ thanks for your response! I'll also take a look at that documentation. However, I didn't really find the answer to my question in it. Maybe it's better if I try it out in the lab to see the difference between the two options (while keeping the same configuration).

Re: Upgrade from R81.10 to R82 (Question)

the_rock — Tue, 06 Jan 2026 14:29:43 GMT

Hey bro,

Essentially, that would work fine, just one is base R82, no jumbo, other one is R82 jumbo 44, so you can go with one that includes jumbo.

Re: Upgrade from R81.10 to R82 (Question)

_Val_ — Tue, 06 Jan 2026 14:46:53 GMT

Your original question was:
My question is: how can I upgrade these gateways/clusters to R82 while keeping all configurations exactly as they are? Which is the safest method?

The answer is: Use MVC upgrade procedure documented in the Upgrade Guide. You can use either CPUSE or CDT to update. You can also trigger the upgrade procedure from your SmartConsole (Central Deployment)

What else is missing?

Re: Upgrade from R81.10 to R82 (Question)

RemoteUser — Tue, 06 Jan 2026 15:21:10 GMT

Nothing thank you Val!

Re: Upgrade from R81.10 to R82 (Question)

RemoteUser — Tue, 06 Jan 2026 15:21:30 GMT

Thank you bro, and both keep the same configuration right?

Re: Upgrade from R81.10 to R82 (Question)

the_rock — Tue, 06 Jan 2026 15:28:00 GMT

Exactly! Upgrade would never wipe out any existing config, but to be sure, though snapshot gets generated automatically when doing major upgrade, I would still take manual backup, or at least, show configuration. Btw, I would not even bother doing this process via clish, but if you want to, just make sure to run unset tmout command first, then installer upgrade, then package path.

If you like, message me directly, we can do remote and go through it together.

Re: Upgrade from R81.10 to R82 (Question)

RemoteUser — Tue, 06 Jan 2026 15:31:06 GMT

Thank you so much, brother. Your help is always really appreciated! You are very important to this community.

Re: Upgrade from R81.10 to R82 (Question)

the_rock — Tue, 06 Jan 2026 15:34:17 GMT

You are too kind bro, its really nothing. I look at this community as brotherhood/sisterhood type of forum, we are all here to HELP, thats it. Hey, btw, I took a short video, so you can see what I was referring to. I was not going to do verify on mine, as I know would fail, due to space issue (since its just a lab), but you get an idea.

(view in My Videos)

Re: Upgrade from R81.10 to R82 (Question)

the_rock — Wed, 07 Jan 2026 00:17:02 GMT

Hey bro,

I can confirm this in the lab tomorrow, but essentially, if memory serves me well, below would be the steps in clish. Lets just say upgrade file name is called R82_upgrade.tgz, here is what I would do:

1-copy the upgrade file to /var/log dir. I usually make new dir calling it say /upgrade, so you copy it there

2-from expert, run unset tmout

3-go to clish, type installer import local /var/log/upgrade/R82_upgrade.tgz

4-once done, run installer verify and then tab to see the correct file (may need to type full path with file name)

5-if 4 is successful, then installer upgrade (tab again or may need to enter full path for upgrade file)

6-let it run, no need to do ctrl+c, it would reboot once finish anyway and would not time out, since you ran unset tmout

7-once rebooted, check if the right policy is there, but if its initial, would still let you ssh into the device (even web UI would work, but ONLY if its on port 443, not any other)

8-change cluster object in smart console to R82, uncheck if it fails during install

9- do exact same steps for the other member, re-check if it fails when pushing policy, make sure right policy is installed on both members by running fw stat

10- enjoy new version! 🙂

Hope that helps!

Re: Upgrade from R81.10 to R82 (Question)

RemoteUser — Wed, 07 Jan 2026 08:29:23 GMT

Thank you buddy!

Re: Upgrade from R81.10 to R82 (Question)

the_rock — Wed, 07 Jan 2026 11:26:13 GMT

Any time!

Re: Upgrade from R81.10 to R82 (Question)

the_rock — Fri, 09 Jan 2026 02:21:31 GMT

Hey brother,

Just to help you even further, I took some time to build totally separate lab with R82 mgmt and R81.20 cluster and was able to upgrade from smart console directly to R82 jumbo 60. Took about 2 hours or so, but everything went well, failover was done automatically, policy worked as well, so definitely something to consider if you decide to do it that way.

Re: Upgrade from R81.10 to R82 (Question)

Vanness_Chen — Fri, 09 Jan 2026 08:06:30 GMT

Hi Andy:

One of my customers is also planning to upgrade from R81.10 to R82, but the firewall is based on Maestro.
Are there any tricky parts or special considerations in terms of the upgrade procedure for a Maestro architecture?