topic Re: Image auto-cloning in R82 in Hyperscale Firewall (Maestro)

Image auto-cloning in R82

Lari_Luoma — Thu, 04 Dec 2025 23:31:00 GMT

Dear CheckMates,

I wanted to highlight an important behavior in R82 related to Maestro and auto-cloning.

When you add new members to a Security Group in R82, the gateways will automatically clone the binaries (including the Jumbo Hotfix) from the SMO even if auto-clone is disabled.

However, when you reboot an existing member of the Security Group, it will not clone the Jumbo from the SMO unless auto-cloning is enabled.

Bottom line:
• Adding new gateways: No need to worry about auto-clone — cloning happens automatically.
• Rebooting existing gateways: They will not clone the Jumbo unless auto-clone is explicitly turned on.

Hope this helps clarify the behavior.

Re: Image auto-cloning in R82

the_rock — Thu, 04 Dec 2025 23:51:21 GMT

Goot to know, Lari. I had this issue with customer in R81.20, mind you, it worked when we disabled the feature via clish and then installed latest jumbo.

Re: Image auto-cloning in R82

Martijn — Fri, 05 Dec 2025 07:46:12 GMT

Thanks Lari,

Installed a R82 Maestro setup last week and was suprised new members had the hotfix installed when they joined the cluster.

Also good to mention the command in R82 is different:

set cluster configuration image auto-clone state {on | off}

Martijn