topic Re: R82 - ElasticXL upgrade in General Topics

R82 - ElasticXL upgrade

Magnus-Holmberg — Sat, 15 Feb 2025 15:15:15 GMT

Hi,

Currently there are missing instructions on how to upgrade HFA on R82 running ElasticXL.
When can we expect the documentation to be updated as its diff from when running ClusterXL.

https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/R82.00/Installation-Uninstall.htm?tocpath=_____6

Regards
Magnus

Re: R82 - ElasticXL upgrade

the_rock — Mon, 17 Feb 2025 02:49:22 GMT

I am pretty sure that same process in clish worked for me when I had elasticxl lab while ago, but I could be mistaken.

Andy

Re: R82 - ElasticXL upgrade

Magnus-Holmberg — Mon, 17 Feb 2025 07:22:01 GMT

Its very similar, (if i remember correct its not the same commands) but there should still be documentation about it 🙂

Re: R82 - ElasticXL upgrade

_Val_ — Mon, 17 Feb 2025 08:16:17 GMT

All, thanks for your feedback. We notified the relevant teams internally, we are fixing this.

Re: R82 - ElasticXL upgrade

Magnus-Holmberg — Sat, 22 Feb 2025 11:44:27 GMT

Thanks, i think the biggest thing is that there is no CPUSE within Gaia portal, so that really need to be highlighted.

Re: R82 - ElasticXL upgrade

the_rock — Sat, 22 Feb 2025 19:45:52 GMT

Agree with that, it definitely should be noted.

Andy

Re: R82 - ElasticXL upgrade

Sergei_Shir — Sat, 08 Mar 2025 21:49:05 GMT

The relevant procedure was updated - it now applies to Maestro and to ElasticXL

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_ScalablePlatforms_AdminGuide/Content/Topics-SPG/Common/Installing-Uninstalling-Hotfix-on-Security-Group-Members.htm

Please provide your feedbacks directly in that topic - on the top toolbar, click the envelope icon.

Thank you.

Re: R82 - ElasticXL upgrade

Magnus-Holmberg — Mon, 10 Mar 2025 07:59:12 GMT

Honestly based on that ElasticXL is planned to be the new ClusterXL.
I would write in the headline
https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/R82.00/Installation-Uninstall.htm?tocpath=_____6

"Installation and Uninstall Instructions for Scalable Platforms"

To be changed to

"Installation and Uninstall Instructions for Scalable Platforms, ElasticXL"

Secondly it need to be updated in the smart console to not permit "central deployment from smartconsole" on elasticXL Clusters.
Because the feature itself says it works and it will upgrade the SMO within the ElasticXL Cluster, and it will say its successfull even that the rest of the members are not updated.

Re: R82 - ElasticXL upgrade

JacWev — Wed, 12 Aug 2026 16:42:07 GMT

Hi Magnus,

We want to upgrade ElasticXL R82 to R82.10. The SMS is Smart-1 Cloud. Do you know if there is a correct procedure. Because when we change the Firewall object to R82.10. We getting a failure during the installation. due to installation failed, Reason TCP connectivity failure Port 18191. And we followed the correct URL.

Jaco Wevers Security Engineer.

Re: R82 - ElasticXL upgrade

Bob_Zimmerman — Wed, 12 Aug 2026 19:55:38 GMT

There are two separate upgrade procedures to upgrade an ElasticXL cluster from R82 to R82.10, depending on whether it's running as a normal firewall or in VSNext mode.

Re: R82 - ElasticXL upgrade

JacWev — Wed, 12 Aug 2026 22:52:49 GMT

Hi Bob,

That's correct, we have a Smart-1 Cloud management environment with an ElasticXL cluster across two sites, with one gateway per site. If we want to upgrade this environment and follow the steps, there is a step where you need to set the gateway to R82.10. Because the SMO connects to Smart-1 Cloud, you can't manage to install a policy on just one gateway. If you'd like to know more, I can explain further.

Re: R82 - ElasticXL upgrade

Bob_Zimmerman — Thu, 13 Aug 2026 00:40:19 GMT

That's not specific to Smart-1 Cloud. An ElasticXL cluster object can only have one version on any management server.

For non-VSNext, check out step 8. For VSNext, you have to do something similar, but for every VS on the box individually.

Re: R82 - ElasticXL upgrade

JacWev — Thu, 13 Aug 2026 07:21:19 GMT

I will explain the environment to you in more detail. The customer has an ElasticXL environment with two sites, and one gateway per site. The active site holds the SMO role.

When you want to upgrade the standby site with the active node, you bring this node down, which allows you to proceed with the upgrade. Then you reach the point where you need to install the policy. That is point 8 you mentioned.

You change the firewall object to R82.10 and then run the installation. However, this fails because the node running R82.10 has no connection to the management server.

Hopefully, I have made it clear now what issue I am running into.

Re: R82 - ElasticXL upgrade

emmap — Thu, 13 Aug 2026 07:40:05 GMT

We have this workaround for Maestro, it should apply to EXL as well. If this is no good please open a TAC case for assistance.

https://support.checkpoint.com/results/sk/sk184660

Re: R82 - ElasticXL upgrade

JacWev — Thu, 13 Aug 2026 07:56:56 GMT

Hi Emmap,

I think this is what we need. Thanks for pointing the SK184660. Very helpfull.

Let you know of this is working.