https://community.checkpoint.com/t5/Hyperscale-Firewall-Maestro/VSX-JHF-upgrade/m-p/215854#M2616 <DIV class=""><DIV><DIV class=""><DIV class=""><DIV class=""><SPAN>Hi Team,</SPAN></DIV><DIV class="">&nbsp;</DIV></DIV></DIV></DIV></DIV><DIV class=""><DIV class=""><DIV class=""><DIV class=""><DIV class=""><DIV class=""><P>We have a Check Point Maestro deployment with Security Gateways (SGs) running in VSX mode. Each VSX instance hosts a member of a two-member Security Gateway cluster (SG-01 and SG-02). We're planning to upgrade the Jumbo Hotfix (JHF) on these VSX instances.</P><P>Our goal is to achieve a zero-downtime upgrade by leveraging the redundancy within the VSX cluster. Is it possible to perform the upgrade in the following way:</P><OL><LI>Perform the JHF upgrade on SG-01. During this upgrade, SG-02 will handle the traffic.</LI><LI>Once SG-01 is upgraded and operational, upgrade the JHF on SG-02.</LI></OL><P>If this is possible, can you show me how to disable the member, perform the upgrade, and bring it back into operation?</P><P>Thanks,</P></DIV></DIV></DIV></DIV></DIV></DIV> Fri, 31 May 2024 07:25:18 GMT Ihenock1011 2024-05-31T07:25:18Z https://community.checkpoint.com/t5/Hyperscale-Firewall-Maestro/VSX-JHF-upgrade/m-p/215854#M2616 <DIV class=""><DIV><DIV class=""><DIV class=""><DIV class=""><SPAN>Hi Team,</SPAN></DIV><DIV class="">&nbsp;</DIV></DIV></DIV></DIV></DIV><DIV class=""><DIV class=""><DIV class=""><DIV class=""><DIV class=""><DIV class=""><P>We have a Check Point Maestro deployment with Security Gateways (SGs) running in VSX mode. Each VSX instance hosts a member of a two-member Security Gateway cluster (SG-01 and SG-02). We're planning to upgrade the Jumbo Hotfix (JHF) on these VSX instances.</P><P>Our goal is to achieve a zero-downtime upgrade by leveraging the redundancy within the VSX cluster. Is it possible to perform the upgrade in the following way:</P><OL><LI>Perform the JHF upgrade on SG-01. During this upgrade, SG-02 will handle the traffic.</LI><LI>Once SG-01 is upgraded and operational, upgrade the JHF on SG-02.</LI></OL><P>If this is possible, can you show me how to disable the member, perform the upgrade, and bring it back into operation?</P><P>Thanks,</P></DIV></DIV></DIV></DIV></DIV></DIV> Fri, 31 May 2024 07:25:18 GMT https://community.checkpoint.com/t5/Hyperscale-Firewall-Maestro/VSX-JHF-upgrade/m-p/215854#M2616 Ihenock1011 2024-05-31T07:25:18Z https://community.checkpoint.com/t5/Hyperscale-Firewall-Maestro/VSX-JHF-upgrade/m-p/215863#M2617 <P>Have you already reviewed the documented process? e.g.</P> <P><A href="https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_Maestro_AdminGuide/Content/Topics-Maestro-AG/Installing-Uninstalling-Hotfix-on-Security-Group-Members.htm?tocpath=Installing%20and%20Uninstalling%20a%20Hotfix%7CInstalling%20and%20Uninstalling%20a%20Hotfix%20on%20Security%20Group%20Members%7C_____0#Installing_and_Uninstalling_a_Hotfix_on_Security_Group_Members" target="_blank">https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_Maestro_AdminGuide/Content/Topics-Maestro-AG/Installing-Uninstalling-Hotfix-on-Security-Group-Members.htm?tocpath=Installing%20and%20Uninstalling%20a%20Hotfix%7CInstalling%20and%20Uninstalling%20a%20Hotfix%20on%20Security%20Group%20Members%7C_____0#Installing_and_Uninstalling_a_Hotfix_on_Security_Group_Members</A></P> Fri, 31 May 2024 08:06:05 GMT https://community.checkpoint.com/t5/Hyperscale-Firewall-Maestro/VSX-JHF-upgrade/m-p/215863#M2617 Chris_Atkinson 2024-05-31T08:06:05Z