topic Re: VSX JHF UPGRADE in Hyperscale Firewall (Maestro)

VSX JHF UPGRADE

Ihenock1011 — Wed, 27 Mar 2024 13:57:07 GMT

Hi All,

We plan to upgrade our security gateway from R81.10 to R81.20. Initially, we will upgrade the JHF. It is an MHO-based VSX mode, and the VSX consists of two members. we want to know whether, during the upgrade of VSX member-01, VSX-Member02 will actively handle traffic. Also, during the upgrade of VSX-Member-SG02, will the primary member handle traffic to ensure there is no downtime? Additionally, please let me know if there are any relevant SKs available for VSX upgrade.

Thanks

Re: VSX JHF UPGRADE

Chris_Atkinson — Wed, 27 Mar 2024 14:22:59 GMT

Which Jumbo take do you currently have?

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Maestro_AdminGuide/Topics-Maestro-AG/Installing-Uninstalling-Hotfix-on-Security-Group-Members.htm?tocpath=Installing%20and%20Uninstalling%20a%20Hotfix%7CInstalling%20and%20Uninstalling%20a%20Hotfix%20on%20Security%20Group%20Members%7C_____0#Installing_and_Uninstalling_a_Hotfix_on_Security_Group_Members

Re: VSX JHF UPGRADE

the_rock — Wed, 27 Mar 2024 15:05:56 GMT

I believe same works on VSX as on regular cluster, at least thats how I remember it from R77 days. When you initiate upgrade on backup member and it reboots, master stays master, but then when master is done, backup will take over and you can switch it back later.

Andy

Re: VSX JHF UPGRADE

Nir_Shamir — Thu, 28 Mar 2024 05:28:10 GMT

Hi,

you can upgrade the JHF on one member only , leaving the 2nd member UP and passing traffic:

installer installer <PackageNumber> member_ids 1_X ...

Re: VSX JHF UPGRADE

Martijn — Thu, 28 Mar 2024 08:49:17 GMT

Hi,

I have installed JFH's on Maestro setups without any downtime. Make sure there is at least one member you are NOT performing the installation, and you are good to go.

For the upgrade to R81.20, check the R81.20 Quatum Maestro Administrator Guide. There are several procedure for upgrading R81.10 to R81.20. Zero Downtime or Minimum Downtime.

Make sure you have backups and and snapshots.
And take you time. The procedure has many steps which must be followed.

Good luck,
Martijn