topic Re: Recommended jumbo hotfix install question in General Topics

Re: Recommended jumbo hotfix install question

Vincent_Bacher — Tue, 10 Feb 2026 16:18:56 GMT

Technically speaking, this might be feasible with a script started by cron that repeatedly checks whether there is anything new e.g. using “show installer packages” and, if so, gets started.

But.
For my part, however, I would definitely not consider something like this, and if I were still working for service providers, I would talk the customer out of such a crazy idea.
But everyone can see it as they wish.

Re: Recommended jumbo hotfix install question

the_rock — Tue, 10 Feb 2026 16:20:49 GMT

Yea, I get what you mean Vince. I dont even think they were truly considering this, more just as an idea.

Re: Recommended jumbo hotfix install question

Lesley — Tue, 10 Feb 2026 16:34:54 GMT

Cronjob can start an update for sure but how would it know when to perform failover to the other member when it is ready. Unit will reboot after jumbo update. With a script you can do a lot also some checks if the other member is ready. But in general I would advise against it to many factors that could go wrong.

Re: Recommended jumbo hotfix install question

the_rock — Tue, 10 Feb 2026 16:37:42 GMT

Im with you 100%, Lesley. Thats exactly the thought I had as well when they described it to me.

Re: Recommended jumbo hotfix install question

Vincent_Bacher — Tue, 10 Feb 2026 16:42:56 GMT

A script could be used on the management and once a new jumbo is available use cdt which does the needful for a cluster including creating the deployment plan and so on.

If there is a way using SmartConsole…no clue.

But I would advise against that too.

Re: Recommended jumbo hotfix install question

the_rock — Tue, 10 Feb 2026 16:43:23 GMT

@Lesley and @Vincent_Bacher

Thanks guys for your great help, as always! I told them even yesterday that this was not the best idea, but they still wanted to know if it was possible, hence my question. Since mgmt is S1C, cdt method can also be used, so thats most likely what we will go with for the next recommended jumbo take.

Re: Recommended jumbo hotfix install question

Bob_Zimmerman — Tue, 10 Feb 2026 18:03:22 GMT

The jumbo page claims there's an RSS feed, but it doesn't seem to actually work. It just has a single item, which is a link to the documentation page. No information about what jumbos exist, let alone which are recommended. Right now, I think the only option is scraping the site and processing the HTML.

I've asked for a few years, now, for a machine-readable list of jumbos so I could build a system like this. ElasticXL clusters have several ways to accidentally update all of the members at once (thereby causing a hard outage), so I'm working on a tool to install jumbos. I'd like to be able to fully automate it on some of my less-critical firewalls so I can hold them up as examples when it's time to update more sensitive systems.

Re: Recommended jumbo hotfix install question

Lesley — Tue, 10 Feb 2026 18:12:08 GMT

correct with cdt there is more automation possible even for clusters

https://sc1.checkpoint.com/documents/CDT/Unified/Topics/Package-Installation-in-Clusters.htm

Maybe this is better answer for the customer then no 😉

Re: Recommended jumbo hotfix install question

the_rock — Tue, 10 Feb 2026 18:13:25 GMT

This dude is super chill, so Im sure they would not be disappointed either way : - )